Eaglizer ITNotice of Privacy Practices template, updated for 2026
Federal rules for substance use disorder records (42 CFR Part 2) required covered entities to update their Notice of Privacy Practices by February 16, 2026. A notice written before 2026 may be out of date.
Free preview before you pay. Editable Word files. 14 day refund.
What a Notice of Privacy Practices must include
- The required header telling patients how their information may be used and how to get access to it
- How the practice uses and shares information for treatment, payment, and operations, with examples
- Other uses allowed or required by law, and uses that need written authorization
- Patient rights: access, amendment, restrictions, confidential communications, an accounting of disclosures, a paper copy, and breach notification
- How to complain to the practice and to HHS, and a statement that there will be no retaliation
- Contact information and an effective date
- The 2026 substance use disorder record language, where the practice receives or keeps those records
What you must do with it
- Give it to every patient no later than the first visit, including telehealth
- Make a good faith effort to get a signed acknowledgment
- Post it in the office where patients can see it, and on your website
- Keep every version for six years
Why a generated notice beats a blank template
Blank templates leave you to fill in every clause and decide which optional sections apply. The kit asks how your practice actually works, for example whether you text patients, run a portal, offer telehealth, fundraise, or keep substance use disorder records, and writes only the sections that apply, with your practice name, officer, and contact details throughout.
Questions
Did the Notice of Privacy Practices change in 2026?
Yes. The 42 CFR Part 2 final rule required notice updates by February 16, 2026 for covered entities that receive or keep substance use disorder treatment records.
What format is it?
An editable Microsoft Word file, plus a matching acknowledgment of receipt form.
Notice of Privacy Practices, $49
- Notice of Privacy Practices, updated for the 2026 rules, plus the acknowledgment form
More guides
- HIPAA compliance for dental offices: what auditors actually check
- HIPAA compliance checklist for small medical practices in California
- The HIPAA security risk assessment, explained for small practices
- HIPAA policies for chiropractic offices
- HIPAA policies for physical therapy practices
- HIPAA policies for mental health and behavioral health practices
- HIPAA policies for optometry practices
- HIPAA for med spas and aesthetics practices
- HIPAA policies and procedures for small medical practices
Templates, not legal advice. Eaglizer IT is not a law firm and does not certify HIPAA compliance. Using templates does not by itself make a practice compliant; follow the policies, train your staff, and keep records.