Ep. 96 – Required Updates to Your HIPAA Notice of Privacy Practices

If you have not updated your HIPAA Notice of Privacy Practices, now is the time! On the podcast this week we walk you through what you need to do to bring your Notice of Privacy Practices into compliance before the deadline. The good news? These updates are manageable, and you still have time to get them done.

In 2024, the Office for Civil Rights (OCR) issued revisions to the HIPAA Privacy Rule. While most of the rules related to reproductive health information were later vacated, a portion dealing with the Notices of Privacy Practices survived, and that portion has a compliance deadline of February 16, 2026.

One of the latest content requirements are unrelated to 42 CFR Part 2 covered records, however, most of the required updates are driven by changes to 42 CFR Part 2, the federal privacy regulations governing substance use disorder (SUD) treatment records. Part 2 was revised in 2024 to better align with HIPAA, and as part of that alignment, HIPAA covered entities must now include certain Part 2-related disclosures in their Notices of Privacy Practices. Even providers that are not Part 2 programs may still receive Part 2-protected records, and when they do, they must comply with Part 2.

Below is a checklist to help you implement these updates. Click here other free resources – including more checklists, policies, and guides. 

Related Episodes:

Ep. 88 – Implement 42 CFR Part 2 Changes by February 16, 2026

Ep. 35 – What you need to know about Part 2 regulations – even if you’re not a Part 2 provider

Ep. 34 – Implementing Changes to Part 2 Regulations Governing Substance Use Disorder Records