Who Can See Your Addiction Treatment Records? Confidentiality Rules for San Diego Rehab

If you are weighing addiction treatment in San Diego and the thing actually holding you back is who might find out, that question has a specific answer in federal regulation rather than a vague reassurance. Substance use disorder treatment records in the United States are governed by their own confidentiality rule, 42 CFR Part 2, which sits alongside HIPAA rather than inside it. As of the edition current on September 1, 2026, Part 2 runs to 38 sections, and three of them — §2.23, §2.25, and §2.26 — describe rights you can ask for by name at admission: access to your own records, an accounting of disclosures that have been made, and the right to request privacy protections on how your information is shared.

That distinction is not a technicality. It changes what a treatment program is allowed to say about you, to whom, and on whose signature.

Part 2 is a separate rule from HIPAA, and the gap is where people get surprised

Many people assume a single privacy form at a hospital covers everything in their chart. For substance use treatment, that assumption is often wrong. A general HIPAA authorization signed at one facility does not automatically reach records held by a federally assisted substance use disorder program. Those records typically require their own consent, describing their own recipients.

The practical consequence is that confidentiality is usually won or lost on a single piece of paper — the consent form — that most people sign during intake without reading, on the hardest morning of their year.

The mechanisms that actually do the protecting

Program-held records: Part 2 is built around records held by federally assisted substance use disorder programs concerning people who have applied for or received services, which is why the rule attaches to the program you enter rather than to the diagnosis itself.

Written consent as the gatekeeper: Disclosure generally runs through a written consent whose requirements are set out at §2.31, so a consent naming a specific person and a specific purpose protects you far better than one authorizing “all records” to “any provider.”

Notice that travels with the file: Section 2.32 requires a notice and copy of consent to accompany a disclosure, which is the mechanism intended to stop a record from being passed onward freely once it leaves the program.

Patient notice at the front door: Section 2.22 requires programs to notify patients of the federal confidentiality requirements, which means the explanation is something you are owed, not a favor you are asking for.

Enforcement behind it: Section 2.3 addresses civil and criminal penalties for violations, so the rule carries consequences rather than resting on goodwill.

Where the protection has limits

Confidentiality rules are strong, but they are not absolute, and a program that tells you otherwise is overselling. Part 2 itself contains sections addressing medical emergencies (§2.51), scientific research (§2.52), audits and program evaluation (§2.53), and public health disclosures (§2.54). A separate subpart, running from §2.61 through §2.68, deals with court orders authorizing use and disclosure.

Read plainly: a court can order disclosure through a defined process, and a genuine medical emergency is handled differently from a routine request. Knowing which door your information could leave through is more useful than believing there are none.

The part nobody mentions: your first phone call

Here is an operational truth from inside this industry that rarely appears in patient-facing material. Before you are a patient, you are a web lead. Many treatment websites — including sites across San Diego — display dynamic call-tracking numbers that change depending on how you arrived, so the number on the screen may not be the organization’s main line. Those marketing systems are a different layer from your clinical record, and they are not what Part 2 was written to govern.

This is not sinister, and it is not unique to behavioral health. But it means the first call is worth one direct question: is this call recorded, and what happens to my number? At Pacific Bay Recovery, the base number is 619-350-8220, and you are entitled to a straight answer about how that first contact is handled before you say anything clinical.

What to do at admission, specifically

These are concrete enough to do this week rather than think about vaguely.

• Ask for the patient notice of federal confidentiality requirements in writing, and keep your copy. Section 2.22 is the provision it comes from.
• Before signing any release, read the recipient line. If it says anything resembling “all providers” or “any family member,” ask for it to be narrowed to named people.
• Ask whether you can request an accounting of disclosures. Section 2.25 covers this, and asking the question at intake tells you a great deal about how carefully a program handles records.
• Decide in advance what you want your employer to receive. In most cases an employer needs dates and a fitness-for-duty statement, not a diagnosis or a treatment summary.
• If you are using leave protections at work, confirm eligibility and documentation requirements with your human resources department in writing before admission, since leave law is separate from Part 2 and depends on your employer and tenure.

What your family is told, and what they are not

Family communication is one of the most common places where expectations and rules collide. Relatives who are paying for treatment, or who drove you to admission, frequently assume that involvement grants them access to clinical information. Under a consent-based framework, it generally does not. An adult patient decides what is shared, and a program that discloses to a parent or spouse simply because they asked is not following the rule.

This cuts both ways, and it is worth thinking through honestly. Family participation is associated with better outcomes in many treatment models, and refusing all contact can work against you clinically. The usable middle ground is a narrow consent: name one family member, specify what they may receive — for example, attendance and family session scheduling but not clinical content — and revisit it later if trust rebuilds. That is a far better instrument than either a blanket release or total silence.

How this plays out across levels of care

The confidentiality framework follows you across the continuum, but the practical exposure differs. Medically supervised detox in San Diego is typically the shortest and most contained phase, with the fewest outside contacts. Residential treatment involves a longer absence, which is usually when leave paperwork and family communication decisions arise. Stepping down to an intensive outpatient program raises different questions, because you are back in daily life and scheduling becomes visible even when records are not.

Planning the disclosure decisions level by level, rather than once at the beginning, tends to produce fewer regrets.

If alcohol or benzodiazepines are involved, get assessed before stopping

One safety point outranks every privacy consideration in this article. Withdrawal from alcohol and from benzodiazepines can involve seizures and other serious medical complications, and stopping abruptly without supervision can be dangerous. Medically supervised detox may be required in these cases. If either substance is part of the picture, a medical assessment should come before any decision about where to go or what to disclose. General information on treatment options is available from SAMHSA and from the National Institute on Drug Abuse.

Where to start

If you want to understand your options before committing to anything, SAMHSA maintains plain-language material on what treatment involves. The SAMHSA National Helpline, at 1-800-662-4357, is a free and confidential information and referral service. If you or someone else is in immediate danger, call or text 988 to reach the Suicide and Crisis Lifeline, or call 911.

To ask about admissions, levels of care, or how records are handled at our facility, you can reach Pacific Bay Recovery at 619-350-8220. Asking questions about confidentiality before you enroll is a reasonable thing to do, and any program worth entering will answer them without defensiveness.

This article is for general educational purposes and is not medical or legal advice. Regulations are summarized here in general terms and may be applied differently to your situation. For guidance about your own care, speak with a qualified clinician; for questions about your rights at work or in a legal proceeding, consult a licensed attorney.