HHS OCR Sample Notice of Privacy Practices (HIPAA) with Updated Part 2 Language
The U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR), issued Model Notices of Privacy Practices (NPP) for healthcare providers and health plans subject to the Health Insurance Portability and Accountability Act (HIPAA). The NPP provides information to patients on how federal law protects the confidentiality of their protected health information (PHI), including any Part 2-protected substance use disorder treatment records.
Key Points
- The 2024 HIPAA Privacy Rule Final Rule required HIPAA covered healthcare providers and health plans to include information about SUD treatment records subject to Part 2 in their NPP.
- Covered entities that are also Part 2 programs may create a combined notice that meets the requirements of both the HIPAA NPP and the Part 2 Patient Notice.
- The Model NPP should be tailored to adequately describe the privacy practices of the covered entity.
Related Resources
The U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR), issued a Model Part 2 Patient Notice for Part 2 programs. The Patient Notice explains how federal law protects the confidentiality of patients’ SUD treatment records.
Answers to frequently asked questions (FAQs) about when parents can access their adult child’s protected health information
This webpage provides an overview of 42 CFR Part 2 (Part 2), a brief recent history of recent changes to the regulations, and resources for organizations and individuals that must comply with Part 2.