Notice of Privacy Practices

Download a HIPAA-compliant Notice of Privacy Practices template for small medical clinics. Covers all required elements of 45 CFR §164.520. Editable for your clinic name and state.

Short answer

A complete, plain-language Notice of Privacy Practices template that satisfies the required content and delivery rules of 45 CFR §164.520, with a companion posting checklist for clinic lobbies and patient portals.

What is inside

All required NPP content — permitted uses, individual rights, complaint procedures, effective date
Written at a grade-8 reading level so patients understand what they are acknowledging
A posting checklist for lobby displays, patient portals, and service-entry distribution
A customization guide for adding state-required disclosures and clinic-specific policies
An acknowledgment receipt template so you can document that patients received the NPP

We publish the same practical templates and decision tools that clinics use to structure recurring HIPAA work. No enterprise gate. No resource-library gimmicks. Just practical material delivered quickly.

Editorial details

Written by: Angel Campa

Reviewed by: PHIGuard Compliance Research

Updated: April 23, 2026

Best next step: Open the matching product path

Verified: April 23, 2026

Sources

Download the PDF

A ready-to-post Notice of Privacy Practices — covering every required disclosure in plain language patients can actually read

Enter your email and we will send the PDF.

Questions

When must a clinic give a patient the Notice of Privacy Practices?

A covered health care provider with a direct treatment relationship must offer the NPP no later than the date of first service delivery, or as soon as practicable after an emergency. Under 45 CFR §164.520(c)(2), the provider must also make a good-faith effort to obtain a written acknowledgment of receipt.

Does the NPP need to be updated if our policies change?

Yes. If there is a material change to your privacy practices, you must revise the NPP promptly and make the revised version available to patients. Clinics that maintain a patient portal or website must post the revised NPP on it.

Can we post the NPP on our website instead of distributing paper copies?

Posting on a website is required if you maintain one, but it does not replace the obligation to offer a paper copy at the first service encounter. Both distribution channels apply.

Is a signed NPP acknowledgment required?

You are required to make a good-faith effort to obtain a written acknowledgment, not the acknowledgment itself. If a patient declines to sign, document the attempt. If circumstances prevent obtaining acknowledgment, document why.