Does the HIPAA Privacy Rule require a health care provider to obtain a new acknowledgement of receipt of the notice from patients if the facility changes its privacy policy?

No. A covered health care provider with a direct treatment relationship with individuals is required to make a good faith effort to obtain an individual’s acknowledgement of receipt of the notice only at the time the provider first gives the notice to the individual — that is, at first service delivery. See 45 CFR 164.520(c)(2).

October 2018

Tags: Notice of Privacy, HIPPA