Health Information Compliance Alert

Question: We recently revised our notice of privacy practices (NPP) to reflect that we will only accept confidential communication requests in writing. Does HIPAA require that we post the revised notice in all patient reception areas or would posting it in the main reception area be enough?


Alabama Subscriber

Answer: "You need to post your notice in the place where you expect patients to see it," affirms John Gilliland, an attorney with Gilliland Markette & Milligan in Indianapolis. But that area isn't the same for each entity, he notes.

If you are in the physician office setting, go ahead and post the notice in the reception area. However, "that's probably not enough for a hospital with several patient waiting areas," because many patients may never come back to the main reception area, Gilliland says. In those cases, you should post the notice in each waiting area.

The bottom line: The intent behind this standard is to make sure your patients are informed of any changes in your privacy practices, Gilliland asserts. You must put the revised notice in an area where your patients are bound to run into it--and don't forget to swap your new notice with the old one on your Web site, he says.