Privacy in Practice: NPP Updates to Protect Your Health Center
On-demand Originally aired February 12, 2026
January 21, 2026 at 1:00 pm (EDT)
Webinar Information
This webinar is Part 2 of 4 in the “I Heart HIPAA” webinar series.
Overview
Learning Objectives
Audience
Instructor
Format
Privacy in Practice: NPP Updates to Protect Your Health Center
Show your Notice of Privacy Practices (NPP) some love with this timely review of the HIPAA requirements and recommendations to protect your health center from patient complaints and OCR investigations.
The HIPAA Privacy Rule requires the NPP to describe how health centers use and disclose patient health information and how patients may exercise their rights to that information. With a compliance date of February 16, 2026, the revised 42 CFR Part 2 regulations require updates to the NPP to explain how substance use disorder (SUD) records protected by Part 2 are used and disclosed. Beyond regulatory compliance, the NPP is also a valuable tool for proactively communicating with patients about data sharing with health information exchanges, parental access to minors’ records, and applicable state law requirements.
This webinar will break down the NPP requirements under both HIPAA and Part 2, providing sample language to ensure your health center complies with the applicable federal requirements. All attendees will receive exclusive access to our Notice of Privacy Practices Template, designed to help your health center implement these updates efficiently and confidently.
CMOs
COOs
Compliance Officers
Risk Managers
Clinical Leadership
HIPAA Privacy Officers
HIPAA Security Officers
This session will:
Identify the required elements of the NPP
Outline best practices for incorporating 42 CFR Part 2 notice requirements into the NPP
Explain strategic revisions and additions to the NPP that clearly define patient expectations regarding data disclosures and access to records under federal and state law
Dianne Pledgie
Principal
Dianne advises health care and non-profit organizations on the development and implementation of robust compliance programs.
Dianne also provides legal guidance on privacy, security and confidentiality matters, with particular focus on Health Insurance Portability and Accountability Act (HIPAA), 42 C.F.R. Part 2 and the Information Blocking Rule, including:
Advising clients on their obligations to protect patient records, respond to patient requests, and develop policies and procedures;
Reviewing business associate agreements, data use agreements, and patient consents related to the use and disclosure of protected health information and sensitive information; and
