A Notice of Privacy Practices (NPP) is a federally required document that explains how a healthcare provider may use and share a patient’s protected health information (PHI), and what rights the patient has under the Health Insurance Portability and Accountability Act (HIPAA). Every covered entity must provide this notice to patients upon intake or the first delivery of care.
Meets Federal HIPAA Requirements
Mandated by law to inform patients about how their health data is handled and protected.
Informs Patients of Their Rights
Explains the right to access, amend, restrict, or receive copies of their medical records.
Outlines Data Use and Disclosure Rules
Clarifies how PHI may be used for treatment, billing, operations, and in special circumstances (e.g., law enforcement, public health).
Builds Trust and Transparency
Reassures patients that their sensitive health information is respected and safeguarded.
Documents Regulatory Compliance
Having signed acknowledgement forms helps meet audit, accreditation, and legal standards.
Medical and Dental Offices
Given to patients during the first visit and upon changes to privacy policies.
Behavioral and Mental Health Clinics
Required when collecting or sharing sensitive mental health information.
Hospitals and Health Systems
Distributed during patient admissions and included in registration packets.
Allied Health Providers
Used by physical therapists, chiropractors, optometrists, and others subject to HIPAA.
Telehealth and Mobile Practices
Shared electronically with patients receiving virtual care.
Provide at First Point of Care
Deliver the NPP when a patient first visits or receives services.
Get Written Acknowledgement
Ask patients to sign a form confirming they received the NPP.
Post It Publicly
Display in the office and on your website as required by law.
Offer in Multiple Languages
Provide translated versions based on your patient population.
Update As Needed
Review and revise the NPP when privacy practices or laws change.