On September 16, 2013, the Health and Human Services Office of Civil Rights (“OCR”) in collaboration with the Office of the National Coordinator for Health Information Technology (“ONC”) released two sets of model Notice of Privacy Practices. One set is for health care providers and the other set is for health plans. The model Notices incorporate the regulatory changes of the Final HIPAA Omnibus Rule published January 25, 2013. The model Notices may be used as templates by health care providers and health plans working to come into compliance with the new requirements.
The model Notices are available in different formats and are customizable. The Notices are available in booklet style, layered notice style and full page style. The model Notices are also available in text version. Covered entities may use the models by entering their specific information into the model such as name and contact information, and then printing for distribution and posting on their websites.
The HIPAA Privacy Rule gives individuals a right to be informed of the privacy practices of health plans and health care providers and of their privacy rights regarding their protected health information. Health plans and health care providers are required by HIPAA to develop and distribute a notice that provides an easy to understand explanation of these rights and privacy practices. The model Notices may serve as a baseline for health plans and health care providers when drafting their own Notice of Privacy Practices.