HIPPA.com

Each covered entity must develop a health information notice to be made available at a patient’s request describing how it uses and distributes health care information. The notice must also advise that patients have the right to request restrictions on the use or distribution of records. Covered entities, however, are not required to agree to restrict use or distribution. The list that covered entities provide of uses and distribution of health information will be a lengthy one. Reportedly, a model privacy notice developed by the American Hospital Association and listing possible uses of health information covered nine pages.