HIPAA Notice of Privacy Practices
HHS says covered healthcare providers generally must provide individuals with adequate notice of how PHI may be used and disclosed, patient rights, and the provider’s legal duties. HHS also provides model Notice of Privacy Practices templates that healthcare entities can customize.