Home > Resources > Compliance Resources > Compliance Quarterly > July 2009 Compliance Quarterly > Reminder on HIPAA Privacy Notices

Reminder on HIPAA Privacy Notices

Updated as of August 21, 2009

Reminder of when a HIPAA Privacy Notice is required

HIPAA requires that privacy notices be issued:

1. To all employees when they first become covered by the plan.
2. To any employee upon request.
3. To all employees each time the privacy policy is revised.

In addition, at least once every three years (beginning three years after the notice is first provided), employees must be informed in writing that the notice is available. In addition, the procedure for requesting a copy of the notice must be explained to employees. Alternatively, a group health plan may distribute a new notice every three years.

For your convenience, a sample copy of a model notice is included in this summary.