42 CFR 2.23 – Patient access and restrictions on use
(a) Patient access not prohibited. These regulations do not prohibit a part 2 program from giving a patient access to their own records, including the opportunity to inspect and copy any records that the part 2 program maintains about the patient. The part 2 program is not required to obtain a patient’s written consent or other authorization under the regulations in this part in order to provide such access to the patient.
(b) Restriction on use of information. Information obtained by patient access to his or her patient record is subject to the restriction on use of this information to initiate or substantiate any criminal charges against the patient or to conduct any criminal investigation of the patient as provided for under § 2.12(d)(1).