Does the HIPAA Security Rule require that patients be provided a Privacy Notice?
Yes. Effective April 14, 2003, patients must be provided with a privacy notice detailing the rights and responsibilities of the patient and the practice in protecting the privacy and confidentiality of protected health information. The privacy notice should be shared with patients upon delivery of service, or as soon as feasible in an emergency. Ti must be available to patients in print, written in clear language, and be posted at each service site – ideally the waiting room. The patient’s acknowledgement that the privacy notice was provided must also be contained. The privacy notice, the patient’s acknowledgement, and each notice revision must be retained for a six-year period. Upon their request, patients must be furnished a copy of the privacy notice.
