The Department of Health and Human Services has a web page dedicated to guidance on this subject. On the web page you will find model Notices of Privacy practices for both healthcare organizations and health plans in both English and Spanish.