HIPAA Glossary · Privacy Rule concepts
NPP
Also: Notice of Privacy Practices
The document telling individuals how their PHI may be used and what rights they hold.
Context
Required by §164.520. Providers must provide, post, and — where possible — obtain written acknowledgement of receipt. The NPP is a Privacy Rule artefact and separately a public-facing one, so content and layout both matter. Updates require a new effective date and re-provision.
Related terms
- Right of access — The individual's right to inspect and obtain a copy of their PHI in the designated record set, generally within 30 days and at limited cost.
- Amendment — The individual's right to request correction of their records, with a process for acceptance or documented denial.
Where this fits
This is one of 50+ terms in the HIPAA Glossary. For how HIPAA is structured end-to-end, see the Security Rule guide and the Privacy Rule guide.