The U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR), issued Model Notices of Privacy Practices (NPP) for healthcare providers and health plans subject to the Health Insurance Portability and Accountability Act (HIPAA). T[JS2.1]he NPP provides information to patients on how federal law protects the confidentiality of their protected health information (PHI), including any Part 2-protected substance use disorder treatment records.