NRPM: Standards for Privacy of Individually Identifiable Health Information. 1. Notice to individuals of information practices. (§164.512)


Each covered entity would have to develop a notice of information practices, which, as described above, could be modeled on the form attached to this proposal or on model forms that we expect professional associations to develop. The notice must accurately reflect the entity’s practices and include the elements listed in §164.512.

Covered health care providers would have to provide the notice to individuals at first service after the effective date of the rule. Providers are also required to post a current copy of the notice in a clear and prominent location for individuals to see. Covered health plans would have to provide the notice to any individual covered by the plan when this rule becomes effective, at enrollment, and after any material change to the notice or at least once every three years.