Treatment center PR is the practice of communicating publicly about addiction and mental health care without exposing the people being treated. Federal rules at 42 CFR Part 2 generally require patient consent to share substance use disorder treatment records, according to McDermott+, and the 2024 final rule set a compliance date of February 16, 2026. A center's public communication has to be built around that consent line.
This post is part of my healthcare PR guide, which lists every healthcare post on this site.
What rules limit what a treatment center can say publicly?
The main federal limit is 42 CFR Part 2, which protects the confidentiality of substance use disorder treatment records and generally requires patient consent to share them. The McDermott+ analysis says Part 2 covers treatment and rehabilitation programs, employee assistance programs, programs within general hospitals, school-based programs and clinicians who provide diagnosis, treatment or referral. It adds that sharing records requires consent except in limited circumstances, including bona fide medical emergencies.
Paubox's summary of the compliance deadline says the rule applies to federally assisted programs that provide substance use disorder diagnosis, treatment or referral and that create or receive Part 2 records. Counsel should confirm whether a specific center falls inside it.
Troutman Pepper reports that HHS posted the final rule on February 8, 2024, that it took effect on April 16, 2024, and that the compliance date was February 16, 2026, in its note on the HIPAA alignment. That date has passed, so updated policies and notices should now be in use.
The rule moved Part 2 closer to HIPAA on patient notice, breach notification and penalties. Williams Mullen notes in its review of the final rule that Part 2 still operates as its own regulatory scheme despite the alignment.
What should a treatment center never publish without consent?
A treatment center should not publish a patient's story, image, quotes or treatment details without the patient's consent, because Part 2 generally requires consent to share treatment records. Four items sit on the consent side of the line.
- Patient stories and testimonials, including ones a family member tells.
- Photos or video in which a patient can be identified.
- Quotes or details drawn from sessions or records.
- Confirmation to a reporter that a named person is a patient. A yes or a no can itself reveal treatment, so the question should go to compliance counsel before anyone answers.
The 2024 rule changed patient notice and consent requirements, so counsel should check any form used for publicity against the current rule and not rely on language written before it.
How should a treatment center handle a crisis at a facility?
A treatment center should handle a crisis by describing what the center is doing and saying nothing that identifies a patient. A statement about a patient incident can cover the center's response, its support for families and its cooperation with authorities, and counsel confirms who is able to consent to anything more.
A data breach adds a second track. Because the 2024 rule aligned Part 2 breach notification with HIPAA, a breach at a treatment center is both a security event and a patient-privacy event. The guide to the first 24 hours of a breach covers the order of work, and the guide to crafting a statement in response to a crisis shows how to structure a holding statement. The hospital crisis PR guide covers the first hour after patient harm, which applies to treatment facilities too.
What can a treatment center publish freely?
A treatment center can publish information about its own program that identifies no patient: how treatment is delivered, who the clinicians are, what the facility offers and how to reach help. These facts give reporters, families and AI answer engines accurate material to cite.
State outcomes only when the center has documented data and can name the source, and date every figure. The wider healthcare PR guide covers claims rules and AI search for health organizations.
Where can treatment centers find PR help?
Treatment centers should look for PR support that works alongside their own compliance function. 5W runs a mental health and addiction services practice, and its rehab and behavioral health PR guide says that practice sits alongside a client's internal compliance function and does not replace it. Ronn Torossian is the founder and chairman of 5W.
Frequently asked questions
Does HIPAA cover addiction treatment records?
Part 2 is a separate federal framework that protects substance use disorder records. The 2024 final rule aligned parts of it with HIPAA, according to Williams Mullen, but programs should ask counsel which rules apply to them.
Can a treatment center share a recovery story?
A treatment center can share a recovery story only with the patient's consent, and compliance counsel should review the consent first. The story should also avoid details that could identify other patients.
When did the updated Part 2 rule take effect?
The final rule took effect on April 16, 2024, and the compliance date was February 16, 2026, according to Troutman Pepper.
Does a PR firm decide what is compliant?
A PR firm does not decide what is compliant. Counsel and the center's compliance team approve what can be said, and a PR firm helps shape and deliver the message within those limits.
The common thread is that a treatment center's public voice is limited by its patients' privacy, not by what it would like to say. Centers that publish accurate program information and keep every patient story behind consent protect both the patients and their own credibility.
By Ronn Torossian. Updated on Oct 21, 2026. This guide is general communications information, not legal advice. Compliance counsel should approve every public statement a treatment center makes.