NRPM: Standards for Privacy of Individually Identifiable Health Information. 3. Notice of information practices.


We propose to require covered plans and providers to document their policies and procedures for complying with the requirement in § 164.512 to develop, make available or disseminate, and amend their notices of information practices. This documentation would address, at a minimum, who is responsible for developing and updating the notice, who would serve as the “contact” person on the notice, how the notice would be disseminated to individuals, and how to respond to inquiries regarding information practices.