Model Notices of Privacy Practices

The HIPAA Privacy Rule requires health plans and covered health care providers to develop and distribute a notice that provides a clear, user friendly explanation of individuals rights with respect to their personal health information and the privacy practices of health plans and health care providers. HHS developed the model NPPs to help improve patient experience and understanding. These models use plain language and approachable designs.

The options below are separated into two sets, for health plans and health care providers.  Each set contains three formatted options and a text only option, in both English and Spanish. They are:

• Notice in the form of a booklet (preferred by consumers in focus testing);
• A layered notice that presents a summary of the information on the first page, followed by the full content on the following pages;
• A notice with the design elements found in the booklet, but formatted for full page presentation.
• A text only version of the notice.

The models reflect the regulatory changes of the Omnibus Rule (2013).  In particular, the models highlight the new patient right to access their electronic information held in an electronic health record, if their provider has an EHR in their practice.  Covered entities may use these models by entering their specific information. Please review Questions and Instructions documents before personalizing the notice.

For more information about the HIPAA Privacy Rule and the Notice requirements, see: http://www.hhs.gov/ocr/privacy/hipaa/understanding/coveredentities/notice.html