Skip to main content

​
Overview

The Electronic Consent module enables your organization to capture, manage, and track patient consents for sharing substance use disorder (SUD) treatment records under 42 CFR Part 2. It provides:
  • Electronic consent capture with typed e-signature
  • Granular consent categories (treatment, payment, operations, providers, research)
  • Consent lifecycle management (active, expired, revoked)
  • Expiration alerts at 30, 14, and 7 days before expiration
  • Redisclosure audit trail — immutable log of all record disclosures
  • Compliance dashboard with aggregate statistics

​
Accessing the Feature

Navigate to Clinical → Electronic Consents (/cl/electronic-consents). Required permission: cl.electronic-consent.view

​
Permissions

To modify role assignments, go to Settings → Permissions.
  1. Click New Consent on the Consents tab
  2. Enter the patient ID
  3. Select consent categories (at least one required):
    • Treatment — sharing for treatment purposes
    • Payment — sharing for payment/billing
    • Operations — sharing for healthcare operations
    • Providers — sharing with specific providers
    • Research — sharing for research purposes
  4. Set the effective date and optional expiration date
  5. Complete the e-signature:
    • Type the signer’s full legal name
    • Review and confirm the attestation statement
  6. Click Sign and Activate to create an active consent, or Save Draft to save without signing
  1. Find the consent in the Consents tab
  2. Click the revoke action (requires cl.electronic-consent.revoke permission)
  3. Review the irreversibility warning
  4. Confirm revocation
Revocation is permanent and cannot be undone. Once revoked, no new disclosures can be recorded against this consent.

​
Recording a Disclosure

  1. Navigate to the Redisclosure Audit tab
  2. Click Record Disclosure
  3. Select the active consent authorizing the disclosure
  4. Enter:
    • Recipient — who is receiving the records
    • Purpose — why records are being shared
    • Records disclosed — types of records shared
  5. Review the 42 CFR Part 2 prohibition-on-redisclosure notice preview
  6. Click Record Disclosure
The disclosure is permanently logged and cannot be edited or deleted.

​
Expiration Alerts

The system tracks consent expiration dates and provides visual alerts: Use the Expiring Soon filter on the Consents tab to view consents approaching expiration.

​
Compliance Dashboard

The Part 2 Compliance Dashboard (/cl/compliance/part2) shows aggregate statistics:
  • SUD Charts — total charts with SUD-flagged records
  • Active Consents — current Part 2 consents on file
  • Consent Coverage — percentage of SUD charts with active consent
  • Disclosures — total disclosure log entries
  • Redisclosures — disclosures with redisclosure flag
No patient identifiers are displayed on this dashboard, consistent with 42 CFR Part 2 requirements.

​
Audit Trail

All consent and disclosure actions are tracked:
  • Consent creation (who, when, categories, signature)
  • Consent revocation (who, when)
  • Disclosure recording (who, when, to whom, what, why)
The redisclosure log is append-only — entries cannot be modified or deleted by any user, including administrators. This ensures chain-of-custody integrity for regulatory compliance.

​
Troubleshooting

​
References