What is 42 CFR Part 2 and how is it different from HIPAA for addiction counselors?

42 CFR Part 2 (the Confidentiality of Substance Use Disorder Patient Records regulation) is a federal law that provides stricter protections for SUD treatment records than HIPAA. The key differences relevant to AI scribes: HIPAA permits disclosure to business associates under a Business Associate Agreement (BAA), with the business associate then permitted to use the data for the purposes described in the BAA. 42 CFR Part 2 requires written patient consent for each disclosure, naming the specific recipient, the specific purpose, and the specific information to be disclosed. A cloud AI scribe vendor is a recipient of SUD records when it processes a session transcript; 42 CFR Part 2 requires consent for that specific disclosure to that specific vendor. Because AI scribe vendors process records for all their customers, the per-vendor consent structure of 42 CFR Part 2 is structurally incompatible with the typical AI scribe business model. TherapyDraft's architecture sidesteps the problem: no SUD content is disclosed to any vendor.

Does TherapyDraft work for LCDC and CADC-licensed addiction counselors?

TherapyDraft works for any licensed clinician providing addiction counseling: LCDCs (Licensed Chemical Dependency Counselors), CADCs (Certified Alcohol and Drug Counselors), LCSWs, LPCs, and psychologists providing SUD treatment. The note template supports DAP, SOAP, BIRP, and GIRP formats and can be calibrated to the clinician's own documentation style using one-shot template matching from their own example addiction counseling notes. The 42 CFR Part 2 compliance argument is the same regardless of credential: if the session audio and transcript stay on the clinician's device, no disclosure to a vendor occurs, and the per-disclosure consent question under 42 CFR Part 2 does not arise.

Topic · AI addiction counseling notes

AI addiction counseling notes drafted on your Mac — 42 CFR Part 2 SUD records never reach a cloud vendor, eliminating the per-disclosure consent problem

Q: Does 42 CFR Part 2 apply to AI scribes used in addiction counseling?

Yes. 42 CFR Part 2 applies to any records that identify a patient as having or having had a substance use disorder, maintained by a federally-assisted SUD treatment program. When an addiction counselor uses a cloud AI scribe, the session audio and transcript are processed by the cloud vendor — and those records identify the patient as receiving SUD treatment. Under 42 CFR Part 2, disclosures of SUD records (including to a business associate processing the records) require patient consent that names the specific recipient of the disclosure, the purpose, and the information to be disclosed. A blanket BAA does not satisfy 42 CFR Part 2's per-disclosure consent requirement. TherapyDraft eliminates the disclosure entirely: no SUD session content reaches any third-party vendor, so the 42 CFR Part 2 consent question does not arise.

Q: What are the biggest legal risks for addiction counselors using cloud AI scribes?

The three biggest legal risks are: (1) 42 CFR Part 2 non-compliance — cloud AI scribes typically cannot satisfy the per-disclosure consent requirement, meaning the upload of SUD session audio to a vendor may constitute an unlawful disclosure under federal law. (2) Subpoena of vendor records in criminal proceedings — SUD records have historically been sought by law enforcement in drug-related prosecutions. The cloud vendor's archive is a separate legal target from the therapist's own records, with different legal protections. TherapyDraft's local processing means no vendor archive exists to subpoena. (3) Third-party payer discovery — in cases where a client's insurance carrier disputes SUD treatment claims, cloud vendor records containing session transcripts are potentially discoverable. TherapyDraft's local processing eliminates the third-party archive in all three scenarios.

42 CFR Part 2 is the federal regulation governing substance use disorder treatment records — and it is significantly stricter than HIPAA. HIPAA permits disclosures to business associates under a BAA; 42 CFR Part 2 requires patient consent for each specific disclosure, naming the specific recipient. When an addiction counselor uploads a session recording to a cloud AI scribe, that upload is a disclosure of SUD records to a vendor — a disclosure that 42 CFR Part 2 requires the patient to have specifically consented to. Most cloud AI scribes cannot satisfy this requirement. TherapyDraft processes addiction counseling session audio locally on the clinician's M-series Mac, eliminating the disclosure to any vendor and making the 42 CFR Part 2 consent question moot.

TL;DR

TherapyDraft is a local AI note-drafting tool that runs entirely on the clinician's M-series Mac. For addiction counseling, it drafts SOAP, DAP, BIRP, and GIRP notes from session audio processed locally — no SUD records are disclosed to any cloud vendor, making the 42 CFR Part 2 per-disclosure consent requirement moot. There is a 10-session free trial at no cost; paid plans start at $39 per month.

Why 42 CFR Part 2 matters more than HIPAA for addiction counselors

Most mental health clinicians are familiar with HIPAA as the governing framework for protected health information. For addiction counselors, HIPAA is the floor — 42 CFR Part 2 (the Confidentiality of Substance Use Disorder Patient Records regulation) is the ceiling, and it is substantially higher.

Under HIPAA, a covered entity can disclose PHI to a business associate without patient consent, provided there is a valid BAA. The business associate can then use the PHI for the purposes described in the BAA. This is the legal framework under which cloud AI scribes operate for most mental health specialties: the therapist signs a BAA with the AI scribe vendor, and the vendor is authorized to process session audio under the BAA.

Under 42 CFR Part 2, this framework does not apply to SUD records. The regulation requires written patient consent for each disclosure, and that consent must name: (1) the specific person or organization to receive the information, (2) the specific name or general designation of the program making the disclosure, (3) the type of information to be disclosed, and (4) the purpose of the disclosure. A blanket BAA does not satisfy these requirements. Each disclosure to each recipient for each purpose requires a separate patient consent.

When a cloud AI scribe processes a session recording that identifies the patient as receiving SUD treatment, that processing is a disclosure under 42 CFR Part 2. The patient's prior consent to use the AI scribe must specifically name that vendor as the recipient. In practice, most cloud AI scribe vendors do not offer consent forms structured to satisfy 42 CFR Part 2's requirements, because their business model assumes BAA-based disclosure, not per-disclosure consent.

The architectural solution: no disclosure to a vendor

TherapyDraft's local processing eliminates the 42 CFR Part 2 problem at the architecture level. If the session audio and transcript never leave the clinician's Mac, no disclosure to a vendor occurs. The 42 CFR Part 2 consent requirements apply to disclosures; if there is no disclosure, there is no consent to obtain.

This is not a workaround or an interpretation — it is the literal application of the regulation. 42 CFR Part 2 protects SUD records by regulating disclosures. TherapyDraft's architecture makes the note-drafting step a purely local computation: the audio is processed on the device, the transcript is generated on the device, and the note draft is produced on the device. The only output that leaves the device is the text of the progress note, which the clinician copies and pastes into their EHR — the same action they would take with any manually written note.

The full regulatory analysis of 42 CFR Part 2 and AI scribes for addiction counseling covers the specific consent requirements, the treatment program applicability rules, and the comparison between the BAA framework and the 42 CFR Part 2 framework in detail.

Note formats for addiction counseling

Addiction counseling uses several note formats depending on the clinical setting and the theoretical framework of the program:

DAP notes (Data, Assessment, Plan) are widely used in outpatient SUD treatment, particularly in Minnesota Model and 12-step-integrated programs. The Data section captures the client's self-report, behavioral indicators, and any toxicology or collateral information. The Assessment section reflects the clinician's formulation of the client's current status in the recovery process. The Plan section documents the next steps, skill practice assignments, and any changes to the treatment plan.

SOAP notes are common in co-occurring disorder and dual-diagnosis settings, where the mental health component requires the more structured clinical documentation format typical of psychiatric and psychotherapy practice. The Subjective/Objective distinction allows separate documentation of client self-report and clinician observation.

BIRP notes (Behavior, Intervention, Response, Plan) are common in intensive outpatient programs (IOP) and partial hospitalization programs (PHP) where behavioral indicators of recovery progress — cravings rated on a 0–10 scale, days of abstinence, trigger identification, relapse prevention plan adherence — are the primary clinical focus of documentation.

TherapyDraft supports all four formats and calibrates to the clinician's own documentation style through one-shot template matching. The clinician supplies five example addiction counseling notes in their preferred format; TherapyDraft drafts to match.

The legal risk picture for addiction counselors

Addiction counselors face a distinctive set of legal risks around session documentation. SUD records have been sought in criminal prosecutions involving drug-related charges, in civil proceedings where sobriety is at issue (custody, professional licensing), and in insurance disputes over the medical necessity of treatment. The combination of stigma-sensitive content, federal heightened protection, and active legal demand creates a documentation risk profile that is higher than most other mental health specialties.

Cloud AI scribes add an independently subpoenable archive to this risk profile. The vendor holds a record of session content — not just the note, but the audio and transcript — that exists outside the therapist's control and is accessible through legal process directed at the vendor. The vendor's response to that legal process is not constrained by 42 CFR Part 2's protections (which apply to the covered entity, not to the vendor's response to legal process directed at the vendor as a business). See AI scribes in opioid treatment programs, the MATE Act, and methadone clinic documentation for the specific analysis of OTP settings.

TherapyDraft's local processing means there is no vendor archive to subpoena. The only records in existence are the clinician's own clinical documentation — governed by 42 CFR Part 2, HIPAA, and the clinician's professional obligations — and the progress notes in the EHR.

Pricing

TherapyDraft is $39 per month or $349 per year for the Solo plan — unlimited addiction counseling session note drafts, DAP / SOAP / BIRP / GIRP format options, EHR paste presets, the inference attestation log, and one-shot template matching from your own example addiction counseling notes. The 10-session free trial requires no credit card. Full pricing breakdown is on the pricing page.