42 CFR § 2.24 - Requirements for intermediaries.

---
identifier: "/us/cfr/t42/s2.24"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "42 CFR § 2.24 - Requirements for intermediaries."
title_number: 42
title_name: "Public Health"
section_number: "2.24"
section_name: "Requirements for intermediaries."
chapter_name: "PUBLIC HEALTH SERVICE, DEPARTMENT OF HEALTH AND HUMAN SERVICES"
subchapter_number: "A"
subchapter_name: "GENERAL PROVISIONS"
part_number: "2"
part_name: "CONFIDENTIALITY OF SUBSTANCE USE DISORDER PATIENT RECORDS"
positive_law: false
currency: "2026-03-24"
last_updated: "2026-03-24"
format_version: "1.1.0"
generator: "[email protected]"
authority: "42 U.S.C. 290dd-2; 42 U.S.C. 290dd-2 note."
regulatory_source: "82 FR 6115, Jan. 18, 2017, unless otherwise noted."
cfr_part: "2"
---


# 2.24 Requirements for intermediaries.

Upon request, an intermediary must provide to patients who have consented to the disclosure of their records using a general designation, pursuant to § 2.31(a)(4)(ii)(B), a list of persons to which their records have been disclosed pursuant to the general designation.

(a) Under this section, patient requests:

(1) Must be made in writing; and

(2) Are limited to disclosures made within the past 3 years.

(b) Under this section, the entity named on the consent form that discloses information pursuant to a patient's general designation (the entity that serves as an intermediary) must:

(1) Respond in 30 or fewer days of receipt of the written request; and

(2) Provide, for each disclosure, the name(s) of the entity(ies) to which the disclosure was made, the date of the disclosure, and a brief description of the patient identifying information disclosed.

[89 FR 12625, Feb. 16, 2024]