Skip to main content


U.S. flag
      An official website of the United States government
              Here’s how you know
        Here’s how you knowDot gov**Official websites use .gov**
                 A **.gov** website belongs to an official government organization in the United States.
                  HTTPS**Secure .gov websites use HTTPS**
                 A **lock** (A locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites. 
  Menu Close
          HHS Search (hipaa)
    Search
        








  
  
    

  
      

                                      About HHS
    
                        
                              
      
      
      Programs & Services
    
                        
                              
      
      
      Grants & Contracts
    
                        
                              
      
      
      Laws & Regulations                  
Health Information Privacy
  HIPAA for Individuals
    
                        
                                            
      
      
      Filing a Complaint
    
                        
                                            
      
      
      HIPAA for Professionals
    
                        
                                            
      
      
      Newsroom

              

    



Breadcrumb
    HHS
                              HIPAA Home
                              For Professionals
                              Privacy
                              Guidance Materials
                              Model Notices of Privacy Practices


    

    

    Navigate to:
  HIPAA for Professionals
    
                                    
                                            
            
      
      
      
      Regulatory Initiatives
    
                                                  
                                                                  
            
      
      
      
      Privacy
                                            
            
            Summary of the Privacy Rule
    
                                                  
                                            
            
      
      
      
      Guidance
    
                                                  
                                            
            
      
      
      
      Combined Text of All Rules
    
                                                  
                                            
            
      
      
      
      HIPAA Related Links
    
                                                  
                                                                  
            
      
      
      
      Security
                                            
            
            Summary of the Security Rule
    
                                                  
                                            
            
      
      
      
      Security Guidance
    
                                                  
                                            
            
      
      
      
      Cyber Security Guidance
    
                                                  
                                                                  
            
      
      
      
      Breach Notification
                                            
            
            Breach Reporting
    
                                                  
                                            
            
      
      
      
      Guidance
    
                                                  
                                            
            
      
      
      
      Reports to Congress
    
                                                  
                                            
            
      
      
      
      Regulation History
    
                                                  
                                                                  
            
      
      
      
      Compliance & Enforcement
                                            
            
            Enforcement Rule
    
                                                  
                                            
            
      
      
      
      Enforcement Process
    
                                                  
                                            
            
      
      
      
      Enforcement Data
    
                                                  
                                            
            
      
      
      
      Resolution Agreements
    
                                                  
                                            
            
      
      
      
      Case Examples
    
                                                  
                                            
            
      
      
      
      Audit
    
                                                  
                                            
            
      
      
      
      Reports to Congress
    
                                                  
                                            
            
      
      
      
      State Attorneys General
    
                                                  
                                                                  
            
      
      
      
      Special Topics
                                            
            
            HIPAA and Part 2
    
                                                  
                                            
            
      
      
      
      Change Healthcare Cybersecurity Incident FAQs
    
                                                  
                                            
            
      
      
      
      HIPAA and COVID-19
    
                                                                
                                                                  
            
      
      
      
      HIPAA and Reproductive Health
                          
            
            HIPAA and Final Rule Notice
    
                                                  
                                            
            
      
      
      
      HIPAA and Telehealth
    
                                                  
                                            
            
      
      
      
      HIPAA and FERPA
    
                                                  
                                            
            
      
      
      
      Research
    
                                                  
                                            
            
      
      
      
      Public Health
    
                                                  
                                            
            
      
      
      
      Emergency Response
    
                                                  
                                            
            
      
      
      
      Health Information Technology
    
                                                  
                                            
            
      
      
      
      Health Apps
    
                                                  
                                                                  
            
      
      
      
      Patient Safety
                                            
            
            Statute & Rule
                          
            
            PSQIA Statute
    
                                                  
                                            
            
      
      
      
      Patient Safety Rule
    
                                                  
                                            
            
      
      
      
      Enforcement
    
                                                  
                                            
            
      
      
      
      Guidance
    
                                                  
                                                                  
            
      
      
      
      Covered Entities & Business Associates
                                            
            
            Business Associate Contracts
    
                                                  
                                            
            
      
      
      
      Business Associates
    
                                    
                                            
            
      
      
      
      Training & Resources
    
                                    
                                            
            
      
      
      
      FAQs for Professionals
    
                                    
                                            
            
      
      
      
      Other Administrative Simplification RulesText resize icon

                    




Model Notices of Privacy Practices








  
  
    

  
      





The HIPAA Privacy Rule requires health plans and covered health care providers to develop and distribute a notice that provides a clear, user friendly explanation of individuals rights with respect to their personal health information and the privacy practices of health plans and health care providers. This page provides options for meeting the requirement to create notices of privacy practices (NPP).
HHS developed the model NPPs you see on this site to help improve patient experience and understanding. These models use plain language and approachable designs.
The options below are separated into two sets, for health plans and health care providers.  Each set contains three formatted options and a text only option, in both English and Spanish. They are:
Notice in the form of a booklet (preferred by consumers in focus testing);
	A layered notice that presents a summary of the information on the first page, followed by the full content on the following pages;
	A notice with the design elements found in the booklet, but formatted for full page presentation.
	A text only version of the notice.The models reflect the regulatory changes of the Omnibus Rule (2013).  In particular, the models highlight the new patient right to access their electronic information held in an electronic health record, if their provider has an EHR in their practice.  Covered entities may use these models by entering their specific information. Please review Questions and Instructions documents before personalizing the notice.
For more information about the HIPAA Privacy Rule and the Notice requirements, see: http://www.hhs.gov/ocr/privacy/hipaa/understanding/coveredentities/notice.html
Instructions -
	Health Plan Instructions
		HC Provider Instructions
		Questions and Instructions for using the Model Notices
NPP Provider Files -
English
NPP Booklet - HC Provider
	NPP Layered - HC Provider
	NPP Full Page - HC Provider
	NPP HC Provider - Text VersionSpanish
NPP Booklet - HC Provider
	NPP Layered - HC Provider
	NPP Full Page - HC Provider
	NPP HC Provider - Text VersionNPP Health Plan Files -
English
NPP Booklet - Health Plan
	NPP Full Page - Health Plan
	NPP Layered - Health Plan
	NPP Health Plan - Text VersionSpanish
NPP Booklet - Health Plan
	NPP Full Page - Health Plan
	NPP Layered - Health Plan
	NPP Health Plan - Text VersionA covered entity must make its notice available to any person who asks for it.
	A covered entity must prominently post and make available its notice on any web site it maintains that provides information about its customer services or benefits.The Office for Civil Rights and Office of the National Coordinator for Health Information Technology collaborated to develop these model Notices of Privacy Practices.
Covered entities that are subject to both the HIPAA Privacy Rule and Section 1557 of the Affordable Care Act (ACA) should visit the FAQs at http://www.hhs.gov/civil-rights/for-individuals/section-1557/1557faqs/index.html for more information about providing taglines, which alert individuals with limited English proficiency (LEP) to the availability of language assistance services, and notices of nondiscrimination on entities’ Notices of Privacy Practices.  OCR provides more information about Section 1557 and makes available translated resources for use by covered entities at:http://www.hhs.gov/civil-rights/for-individuals/section-1557.
Revised February 2014Model Notices of Privacy Practices
Digital Privacy Notice Challenge open through April 7

                    
  


Content created by Office for Civil Rights (OCR) Content last reviewed April 8, 2013Back to top
    Contact HHS
    
                        
                                            
      
      
      Careers
    
                        
                                            
      
      
      HHS FAQs
    
                        
                                            
      
      
      Nondiscrimination NoticeHHS Archive
    
                        
                                            
      
      
      Accessibility Statement
    
                        
                                            
      
      
      Privacy Policy
    
                        
                                            
      
      
      Viewers & PlayersBudget/Performance
    
                        
                                            
      
      
      Inspector General
    
                        
                                            
      
      
      Web Site Disclaimers
    
                        
                                            
      
      
      EEO/No Fear ActFOIA
    
                        
                                            
      
      
      The White House
    
                        
                                            
      
      
      USA.gov
    
                        
                                            
      
      
      Vulnerability Disclosure Policy
        Sign Up for Email Updates

Receive the latest updates from the Secretary, Blogs, and News Releases.

Sign Up
  HHS Headquarters
          200 Independence Avenue, S.W.
                  Washington, D.C. 20201
                  Toll Free Call Center: 1-877-696-6775​Disclaimer Policy: Links with this icon () mean that you are leaving the HHS website.
              The Department of Health and Human Services (HHS) cannot guarantee the accuracy of a non-federal website.
                  Linking to a non-federal website does not mean that HHS or its employees endorse the sponsors, information, or products presented on the website. HHS links outside of itself to provide you with further information.
                  You will be bound by the destination website's privacy policy and/or terms of service when you follow the link.
                  HHS is not responsible for Section 508 compliance (accessibility) on private websites.For more information on HHS's web notification policies, see Website Disclaimers.
              Continue
                  Go back