Episode 50: How to Avoid a HIPAA Danger Zone: The Notice of Privacy Practices form

The Private Medical Practice Academy

The Notice of Privacy Practices is a form that many patients toss in the garbage but that can you into a lot of trouble and costs an enormous amount of money. HIPAA guarantees a variety of patient rights--including a patient’s right to know how you’re going to use their Protected Health Information (PHI.) As part of that, you are required to describe your office’s privacy practices in writing in an easy-to-read document called a Notice of Privacy Practices.

The HIPAA guidelines state that you must “do your best” to get your patients to sign an acknowledgment that indicates that they have

• received a copy of your Notice of Privacy Practices
• been made aware of a notice copy posted in your waiting area, or
• been informed that a copy is available on your practice’s website

What should you include in your privacy notice:

• Rights: Your privacy notice must clearly spell out your patients’ rights
• Choice: Patient privacy choices must also be clearly listed
• Use: You are required to tell your patients how you will use their information
• Date and Sign: Although your patients are not required to sign and date your privacy notice, there must be a place for them to do so on the document
• Change: Your patients have the right to change the instructions on how you are authorized to utilize their information

Here's a HIPAA-compliant sample Notice of Privacy Practices form.

How to use the form correctly:

• Timing: Every new patient packet must contain a complete copy of your privacy notice. Have patients review your privacy notice again at least every three years.
• Availability: Post a copy of your Notice of Privacy Practices where your patients can easily see it.
• Signature: Make a “good faith” effort to document acknowledgment of your privacy notice by getting your patient to sign and date it.
• Refusal to Sign: If they refuse to sign, document the reasons.
• Language: Your Notice of Privacy Practices form needs to be available in other language options as your practice represents.

Who can Sign a Privacy Notice?

• Adults: All patients who are competent adults.
• Minors: The legal parent(s)

Want to hear more tips on how to start, run and grow your practice and related medical businesses, please sign up for my newsletter at https://www.thepracticebuildingmd.com
Join my FB group, The Private Medical Practice Academy.
Enroll in How To Start Your Own Practice and get the step-by-step process for opening your practice.
Join The Private Medical Practice Academy Membership for live group coaching, expert guest speakers and everything you need to know to start, grow and leverage your private practice. The course, How To Start Your Own Practice is included in the membership, as a bonus.
Rate, Review, & Follow on Apple Podcasts"I love Sandy Weitz and The Private Medical Practice Academy Podcast." <-- If that sounds like you, please consider rating and reviewing my show! This helps me support more people -- just like you -- move toward the practice they want . Click here, scroll to the bottom, tap to rate with five stars, and select “Write a Review.” Then be sure to let me know what you loved most about the episode!