Frequently Asked Questions
What is Part 2 data?
Part 2 data refers to information related to substance use disorder (SUD) treatment that is protected by federal law (42 CFR Part 2). Because this information is especially sensitive, it has additional access and training requirements.
How does Contexture protect Part 2 data?
Contexture uses role-based access controls and required training to ensure only appropriate PatientCare 360 Portal users can see Part 2 data and only when a patient has given consent.
What is the required Part 2 training for?
The required training is needed for:
- Viewing Part 2 data with patient consent
- Uploading consent forms
- Revoking consent forms
If a PatientCare 360 Portal user has not completed the training, they will not be able to view Part 2 data or manage consents, even if their role would otherwise allow it.
For clarity, a Part 2 Consent Form is also considered Part 2 data and is protected.
Who can access Part 2 data and Consent Form through the HIE?
Only PatientCare 360 Portal users who meet both of the following conditions can access Part 2 data:
- They are assigned an approved user role, and
- They have completed required Part 2 training
What happens if a user has not completed the training?
If a PatientCare 360 Portal user has not completed the required training, they will not be able to see Part 2 data or view Consent Forms, even if their role would otherwise allow it.
Training is mandatory and must be completed before Part 2–related access or actions are enabled.
Who decides which users get access?
Your organization decides which of your PatientCare 360 Portal users should have access to Part 2 data.
Contexture provides the guardrails (i.e., roles and training), but your organization controls who needs access based on job duties and workflows.
What if I use front desk or billing staff to manage consents, but they don't need access to Part 2 data?
Some PatientCare 360 Portal users, such as front desk and billing staff or consent form management staff, may need to upload and revoke consent forms but do not need to see Part 2 clinical data.
For these users:
- They must still complete the required Part 2 training
- Their access will be limited to
- Consent upload and revocation
- viewing consents and face sheets only
- They will not have access to Part 2 clinical data
This allows organizations to safely separate administrative consent work from clinical data access, while still meeting federal requirements.
Does everyone at an organization automatically get access?
No. Access is not automatic and is not organization-wide.
Only PatientCare 360 Portal users you designate, in approved roles, who complete training will have access.
Why is this approach used?
This approach helps organizations:
- Protect sensitive patient information
- Support common front-desk and billing workflows
- Meet federal Part 2 requirements
- Limit access to users with a legitimate need
- Reduce organizational risk
- Build patient trust in data sharing
If you have more questions about Part 2 data and/or this training, please contact your Contexture Engagement Manager or email GetConnected@contexture.org.
