A still relatively unknown aspect of the original HIPAA regulations is the requirement to make your Notice of Privacy Practices available on your medical practice's website.

The regulation reads, in part: "A covered entity that maintains a web site that provides information about the covered entity's customer services or benefits must prominently post its notice on the web site and make the notice available electronically through the website." Department of Health and Human Services § 164.520 (c)(3)(i)

If this notice is not currently available on your website, give a copy to your webmaster for posting. Make sure to update it, too, when any changes are made.

Authored by
Waldene Drake, RN, MBA
Vice President of Risk Management & Patient Safety

 

Published comments of this information should not be considered legal advice applicable to a specific situation. Legal guidance for individual matters should be obtained from a retained attorney.