All posts tagged NPP

HIPAA Cartoon: Notice of Privacy Practices

Daniel Solove
Founder of TeachPrivacy

Cartoon HIPAA Notice - TeachPrivacy HIPAA Training 02 medium

This HIPAA cartoon involves the notice of privacy practices (NPP) under HIPAA.  HIPAA has a set of detailed requirements for the NPP.  See 45 CFR 164.520 for the text of HIPAA’s requirement for NPPs.

The biggest challenge regarding privacy notices is that hardly anyone actually reads the notice, and notices are often a chore to read.

There is a Hobson’s choice when it comes to such notices, whether under HIPAA or otherwise.  As I wrote in Privacy Self-Management and the Consent Dilemma, 126 Harvard Law Review 1880 (2013): “[M]aking [notices] simple and easy to understand conflicts with fully informing people about the consequences of giving up data, which are quite complex if explained in sufficient detail to be meaningful.  People need a deeper understanding and background to make informed choices.”  Sadly, there’s no easy way to win on this one.

Continue Reading