Specific language clarifying that SUD records (Part 2 records) require written authorization for disclosure, even for treatment or payment purposes in many cases.
Separate statements regarding limits on the use of records in legal proceedings.
Core Components of a Proper Notice of Privacy Practices (NPP)
Detailed, actionable examples of how information is used. Your Rights Section. Complaint Section. Contact Information. If you're creating a template, I can help you: Draft the SUD/Part 2 records section (as it's a 2026 focus) Draft the patient rights section Provide a checklist for fundraising opt-out clauses Let me know which area you'd like to work on.
Clear information on the individual's rights, including the right to inspect, copy, amend, or request restrictions on their PHI.
A statement informing individuals they can file complaints with the entity or the Secretary of HHS without fear of retaliation.
According to HIPAA guidelines, a compliant NPP must be written in plain language and include the following elements:
Based on your request, here is the proper content covering the Notice of Privacy Practices (NPP) requirement for covered entities, often referenced in 2026 updates, particularly regarding the handling of sensitive patient information.
