The HIPAA Privacy Rule generally requires covered entities (health plans, health care providers and health care clearinghouses) to provide individuals with a Notice of Privacy Practices (or Privacy Notice) to ensure they understand how their protected health information (PHI) may be used and disclosed, as well as their rights with respect to PHI.
