Q: Patients receive a Notice of Privacy Practices (NPP) at their initial visit that includes information explaining their privacy rights. This includes the patients' right to opt-out of the facility directory. Should the covered entity remind patients of their rights during subsequent visits?
A: Direct care providers are only required to notify patients of their rights as outlined in the provider's NPP at the time of their initial appointment. The provider is not required to remind patients of their rights, including the right to opt-out of the facility directory, during subsequent visits.
The provider is required to notify the patient if there has been any material change in their NPP and offer one to the patient, but the patient does not have to sign a new acknowledgment of receipt of the new NPP.