Privacy in Practice: NPP Updates to Protect Your Health Center

This webinar is Part 2 of 4 in the “I Heart HIPAA” webinar series.

Show your Notice of Privacy Practices (NPP) some love with this timely review of the HIPAA requirements and recommendations to protect your health center from patient complaints and OCR investigations.

The HIPAA Privacy Rule requires the NPP to describe how health centers use and disclose patient health information and how patients may exercise their rights to that information. With a compliance date of February 16, 2026, the revised 42 CFR Part 2 regulations require updates to the NPP to explain how substance use disorder (SUD) records protected by Part 2 are used and disclosed. Beyond regulatory compliance, the NPP is also a valuable tool for proactively communicating with patients about data sharing with health information exchanges, parental access to minors’ records, and applicable state law requirements.

Learning Objectives:

• Identify the required elements of the NPP
• Outline best practices for incorporating 42 CFR Part 2 notice requirements into the NPP
• Explain strategic revisions and additions to the NPP that clearly define patient expectations regarding data disclosures and access to records under federal and state law

Audience:

• CMOs
• COOs
• Compliance Officers
• Risk Managers
• Clinical Leadership
• HIPAA Privacy Officers
• HIPAA Security Officers

Presenter:

• Dianne Pledgie