brand logo

Fam Pract Manag. 2013;20(5):6

The article “HIPAA Again: Confronting the Updated Privacy and Security Rules” [May/June 2013] mistakenly said the new HIPAA (Health Insurance and Portability and Accountability Act) rules require practices to alert patients in their Notice of Privacy Practices (NPP) if they send automated appointment reminders or communications about treatment alternatives or health-related benefits. In fact, if a practice receives remuneration from patients for sending such communications, it has to get an authorization from the patient to do so. But there is no requirement that these communications be included in the NPP. Also, the article mistakenly said practices must include in the NPP new liabilities associated with business associates under the updated HIPAA rules. This is also not necessary.


Send your comments to Submission of a letter will be construed as granting AAFP permission to publish the letter in any of its publications in any form. We cannot respond to all letters we receive. Those chosen for publication will be edited for length and style.

Continue Reading

More in FPM

More in PubMed

Copyright © 2013 by the American Academy of Family Physicians.

This content is owned by the AAFP. A person viewing it online may make one printout of the material and may use that printout only for his or her personal, non-commercial reference. This material may not otherwise be downloaded, copied, printed, stored, transmitted or reproduced in any medium, whether now known or later invented, except as authorized in writing by the AAFP.  See permissions for copyright questions and/or permission requests.