(1) Each substance use disorder facility (SUDF) must have a comprehensive secure client record system maintained in accordance with 42 CFR Part 2.

(2) Each SUDF must have written procedures which regulate and control access to and use of client records. 

(3) In case of a SUDF closure, the SUDF closing its treatment agency must arrange for continued management of all client records.