1. What is a health care provider's duties if a patient refuses to sign an acknowledgement of receipt of the Notice of Privacy Practices?
2. Does the HIPAA Privacy Rule require a business associate to create a notice of privacy practices?
3. Is our medical practice required to notify patients through the mail of any changes to our notice?
4. Is a health care provider required to give his/her notice to every patient or can she just post the notice in there waiting room and give a copy to those patients who ask for it?
5. Does a health plan have to provide a copy of its notice to each dependent receiving coverage under a policy?
6. Does the HIPAA Privacy Rule permit health care providers to obtain an electronic acknowledgement of the notice from individuals?
7. For group health plan products, can the health plan send its notice to the administrator of the group product or the plan sponsor for them to distribute to each employee enrolled in the plan?
8. It is common for hospitals and other health care providers to collect preoperative information over the phone from a new patient prior to the day of surgery in order to determine whether the patient has any special medical concerns or issues that need to be addressed. Does the HIPAA Privacy Rule prohibit this practice if the patient has not yet received or acknowledged the provider's notice?
9. Are covered entities permitted to give individuals a “layered” notice?
10. Are hospitals or other health care providers required to provide their notices to patients they treat in an emergency?
11. Are health plans required to make a good faith effort to obtain from their enrollees a written acknowledgement of receipt of the notice?
12. Can a covered entity bypass obtaining an individual's authorization for a use or disclosure not permitted by the HIPAA Privacy Rule simply by informing individuals of the use or disclosure through it notice of privacy practices?
13. As a pediatrician, am I required to give my notice of privacy practices to the children I treat?
14. If a health care provider chooses to obtain an individual's consent to use or disclose protected health information about them, does the provider also have to make a good faith effort to obtain the individual's acknowledgement of the notice?
15. We participate in an organized health care arrangement (OHCA). How are we to comply with the HIPAA Privacy Rule's requirements for providing notices and obtaining individuals' acknowledgements of the notice?
16. Can covered entities distribute their notices as part of other mailings or distributions?
17. Does the HIPAA Privacy Rule require a health care provider to obtain a new acknowledgement of receipt of the notice from patients if the facility changes its privacy policy?
18. How are health care providers supposed to provide the notice to individuals and obtain their written acknowledgement of the notice when the first treatment encounter is over the phone or in some other manner that is not face-to-face?
19. Is a pharmacist permitted to have customer acknowledge receipt of the notice by signing or initialing the log book that they already sign when they pick up prescriptions?
20. Does the HIPAA Privacy Rule require a business associate to create a notice of privacy practices?
21. Are health care providers required by the HIPAA Privacy Rule to post their entire notice at their facility or may they post just a brief description of the notice?
22. When can a revision take effect?
23. Are health care providers required to mail the revised notice to all patients whenever there is a revision?
24. Do the regulations define what constitutes a "material change" that would require revision to the Notice?
25. What is required if health care providers wish to revise our Notice of Privacy Practices?
26. What information needs to be included in our Notice of Privacy Practices?
27. What is the information that must be included regarding uses and disclosures of information?
28. Are there specific requirements for the "header" of the Notice of Privacy Practices?
29. How much detail are health care providers required to provide in the notice regarding uses and disclosures?
30. Does HIPAA also require health care providers to list each state law that requires reporting in the Notice of Privacy Practices?
31. Are health care providers required to list disclosures that they are permitted to make under the regulations without authorization but which they do not anticipate ever making?
32. What are the individual rights that health care providers must detail in the Notice?
33. What are the duties of the health care provider that must be listed in the Notice
34. What are health care providers required to include in the notice regarding complaints?
35. What type of contact information is required in the Notice?
36. What is the effective date that must be included in the Notice?
37. What are the optional statements that may be included in the Notice of Privacy Practices?
38. Are health care providers required to obtain a signed acknowledgment that the individual has received and/or read and understood our Notice of Privacy Practices?
39. Is it sufficient to publish the notice in English only?
40. What does the "plain language" requirement entail?
41. Do all individuals have a right to notice of the uses and disclosures of their protected health information made by health care providers?
42. What are the duties of health care providers with respect to notifying persons of their privacy practices?
43. What are our responsibilities for providing our Notice of Privacy Practices to patients and the public?
44. What is a direct and indirect treatment relationship with an individual?
45. When must health care providers provide the notice to patients with whom they have a direct treatment relationship?
46. How must the notice be provided to these direct treatment relationship patients?
47. How do health care providers provide notice if the first service delivery is delivered electronically?
48. What are the responsibilities of health care providers for providing the Notice of Privacy Practices to patients with whom we have only an indirect treatment relationship?
49. Are there special rules for health plans regarding the Notice of Privacy Practices ?
50. Are health care providers required to post Notice of Privacy Practices?
51. Do health care providers have to do anything special for patients who cannot read?
52. Can a health care provider fulfill his obligation by providing a copy of his Privacy Practices e-mail?
53. What are a health care provider's documentation responsibilities with respect to the Notice of Privacy Practices?
54. When must Notice of Privacy Practices be available to individuals?
55. Are health care providers required to post Notice of Privacy Practices if they have a Web site?
56. Can Notices of Privacy Practices be combined with the individual's consent or authorization for uses and disclosures of protected health information or with other documents?