Compliance & Legal
Notice of Privacy Practices (NPP)
A document telling patients how their health information may be used and disclosed.
A Notice of Privacy Practices (NPP) is a document that HIPAA covered entities must give to patients explaining how their protected health information (PHI) may be used and disclosed, and describing the patient's privacy rights.
The NPP is a Privacy Rule requirement for covered entities such as providers and health plans. Hosting providers and other business associates don't issue their own NPP, but the platforms they host must be able to honor the rights the notice describes. Where it must appear on a site is in HIPAA compliant website.