

Navigating 42 CFR Part 2: What Behavioral Health and Mental Health Apps Need Beyond HIPAA
42 CFR Part 2 enforcement began February 2026. If your behavioral health or mental health platform handles SUD records, HIPAA compliance is not enough. Here is what your architecture actually needs to pass a security review.
Demyd Maiornykov
4 days ago7 min read