Notice of privacy practices

Refer the patient to the entity s Notice of Privacy Practice. Each entity must establish a notice of privacy practice that advises the patient how, where, and when his or her protected health information will be used. 

Advise the patient that the notice of privacy practice may be revised. 

Consents must be signed and dated by the patient and be kept on file for at least 6 years from the date signed. These may be stored electronically and may be a condition of treatment. Health care providers may condition treatment upon the patient s consent to the use and/or disclosure of protected health information. Health plans may condition enrollment in the plan upon patient s consent to the use and/or disclosure of protected health information. The use of a patient s health information is essential to the appropriate treatment and care of the patient. It is also necessary for the payment for the care and treatment of the patient. There is a limit on the use of psychotherapy notes. The notes can be used only for treatment of the patient by the note taker, in legal action, or for the health and safety of the patient. The consent cannot be combined with the notice of privacy practice but... 

The US Federal Trade Commission presented a report to Congress in May 2000 on Privacy Online Fair Information Practices in the Electronic Marketplace. It is worth mentioning because of the useful way it breaks down components of the overall challenge. The report states that consumer-oriented businesses would be required to comply with four basic information practices, that is Notice, Choice, Access, and Security. 

---