Why you need this policy:
HIPAA requires medical practices to prepare and post a Notice of Privacy Practice (NPP) notifying patients of their rights to their own personal health information (PHI) and how the practice uses and discloses the PHI it collects from patients. The NPP is as old as the HIPAA law itself; but recent changes (contained in a law called the HITECH Act—Health Information Technology for Economic and Clinical Health) to the privacy rule require medical practices to modify their NPP by Sept. 23, 2013.
How this policy helps you:
The Model NPP, which comes right from the agency that enforces the HIPAA privacy rule (the U.S. Department of Health and Human Services Office of Civil Rights), complies with the new requirements under HITECH.
How to use this policy:
Because it comes from the government agency, you don’t want to make massive revisions to this Model NPP.
