A Notice of Privacy Practices built for therapy practices, not hospitals
Your NPP is the most visible HIPAA document you have: clients sign it, it hangs in your waiting room, and it lives on your website. It is also the one most likely to be out of date right now.
Your NPP may already be outdated
The rules governing what an NPP must say changed, the Part 2 (substance-use) alignment and reproductive-health-privacy provisions carried a compliance date in early 2026. If your practice is still handing clients an older notice, it is no longer current.
What a compliant therapist NPP must include
- How you use and disclose protected health information for treatment, payment, and operations, in plain language a client understands
- The client’s rights: access, amendment, accounting of disclosures, restrictions, confidential communications, and a paper copy on request
- Your legal duties and the current Part 2 and reproductive-health disclosure language
- How to file a complaint with you and with HHS OCR
- Effective date and your Privacy Officer contact information
Why ours beats the free government model
The HHS model NPP is generic and hospital-flavored. Ours is pre-written for a therapy practice’s actual data flows, insurance billing, telehealth platforms, supervision and consultation, and psychotherapy-note handling, and fills in from your practice details. Free preview; pay only to download the clean, editable version.