Skip Navigation

Font Size Print Download Reader HHS Home|About HHS|Contact Us

Notice and Other Individual Rights FAQs

Topics on This Page:

Covered Entities Notice Requirements
Family Members Privacy
Health Privacy Complaint Procedure
Health Plan Disclosure Requirements
Business Associates Disclosure Requirements
Clinical Lab Improvement Amendments (CLIA) of 1988

Covered Entities Notice Requirements

Information Sharing Procedures

Can a covered entity bypass obtaining an individual's authorization for a use or disclosure not permitted by the HIPAA Privacy Rule simply by informing individuals of the use or disclosure through it notice of privacy practices?
It is common for hospitals and other health care providers to collect preoperative information over the phone from a new patient prior to the day of surgery in order to determine whether the patient has any special medical concerns or issues that need to be addressed. Does the HIPAA Privacy Rule prohibit this practice if the patient has not yet received or acknowledged the provider's notice?
Are covered entities permitted to give individuals a “layered” notice?
Does the HIPAA Privacy Rule require a health care provider to obtain a new acknowledgement of receipt of the notice from patients if the facility changes its privacy policy?
May a hospital or other covered entity notify a patient's family member or other person that the patient is at their facility?
If patients request copies of their medical records as permitted by the Privacy Rule, are they required to pay for the copies?

Documentation of Notice

Distribution of Notice

Family Members Privacy

Health Privacy Complaint Procedure

If I believe that my privacy rights have been violated, when can I submit a complaint?

Health Plan Disclosure Requirements

Business Associates Disclosure Requirements

Does the HIPAA Privacy Rule require a business associate to create a notice of privacy practices?

Clinical Lab Improvement Amendments (CLIA) of 1988

Does the HIPAA Privacy Rule require a business associate to create a notice of privacy practices?