If SUD records are used for fundraising, a clear, conspicuous opportunity for individuals to opt out of communications.
A statement informing individuals they can file complaints with the entity or the Secretary of HHS without fear of retaliation.
Notice of Privacy Practices for Protected Health Information - HHS.gov Hotas_zip
Based on your request, here is the proper content covering the Notice of Privacy Practices (NPP) requirement for covered entities, often referenced in 2026 updates, particularly regarding the handling of sensitive patient information.
Specific language clarifying that SUD records (Part 2 records) require written authorization for disclosure, even for treatment or payment purposes in many cases. If SUD records are used for fundraising, a
A statement that information disclosed by a covered entity could potentially be re-disclosed by the recipient and no longer protected by HIPAA. Structure of the Document Title: Notice of Privacy Practices. Effective Date: The date the notice is effective. Introduction: Purpose of the notice.
Detailed, actionable examples of how information is used. Your Rights Section. Complaint Section. Contact Information. If you're creating a template, I can help you: Draft the SUD/Part 2 records section (as it's a 2026 focus) Draft the patient rights section Provide a checklist for fundraising opt-out clauses Let me know which area you'd like to work on. Specific language clarifying that SUD records (Part 2
According to HIPAA guidelines, a compliant NPP must be written in plain language and include the following elements: