Health Information Management

Q: Do patients need to renew HIPAA acknowledgements every year?

HIM-HIPAA Insider, March 2, 2009

A: No. The HIPAA privacy rule requires covered entities to obtain an acknowledgment when they first give their notice of privacy practices to patients. Covered entities do not have to reissue the notice or obtain a new acknowledgment on subsequent visits unless there are material (significant) changes to the notice. If there are significant changes to the notice, the covered entity should provide the new notice to patients as they return for care and obtain a new acknowledgement. Covered entities that are health plans face an additional requirement every three years to notify individuals covered by the plan of the availability of the notice and how to obtain it.
 
Editor's note: Mary Brandt, president of Bellaire, TX-based Brandt & Associates, LLC, answered this question. This is not legal advice. Consult your attorney concerning legal matters.

Most Popular