The Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule requires health plans to have policies and procedures to protect the confidentiality of protected health information (PHI) about their participants.  This information must be described in a Privacy Notice that should be distributed to plan participants at least every three years.  It is now time to distribute this notice.