Myth Buster: Health plans and providers have satisfied HIPAA’s notice requirements once they have provided individuals with a Notice of Privacy Practices

Covered entities (CEs), such as health plans and most providers, are required to provide individuals with a notice clearly explaining its privacy practices and informing individuals of certain privacy rights. Some providers may believe that the notice need only be given at the beginning of the relationship with a patient or only once per year.  In fact, the notice must be revised and redistributed any time there is a material change. To learn more about when an NPP must be revised and redistributed, please read our Myth Buster.