HIPAA Updates & the Notice of Privacy Practices (NOPP): What Therapists Need to Know
If you’ve been hearing rumblings about HIPAA updates and changes to the Notice of Privacy Practices (NOPP), you’re not alone. Many therapists are wondering what’s actually required, what needs updating, and what’s simply guidance versus a hard rule.
Let’s slow this down and talk through what matters — without panic.
What’s Changing (and What Isn’t)
HIPAA itself hasn’t suddenly been rewritten, but there have been updates and clarifications around patient rights, access to information, and how those rights are communicated. The NOPP is the document meant to explain these rights clearly and in plain language.
The biggest takeaway:
Your NOPP should accurately reflect how your practice currently operates — especially around access to records, electronic communication, and privacy protections.
This isn’t about creating something new out of thin air. It’s about alignment.
Why the NOPP Matters
The Notice of Privacy Practices isn’t just a form to check off a list. It’s meant to:
Explain how protected health information (PHI) is used and shared
Outline client rights regarding their records and information
Describe how clients can file complaints or ask questions
When your NOPP is outdated or doesn’t match your actual practices, that’s where risk can show up — not because you’re doing something wrong, but because the paperwork doesn’t reflect reality.
Common Areas to Review
If you haven’t looked at your NOPP in a while, here are a few areas worth reviewing:
Electronic records and portals: How clients access their information
Response timelines: How quickly records requests are handled
Communication methods: Email, text, telehealth platforms
Practice changes: New EHRs, group practices, associates, or supervisors
If any of these have shifted since your NOPP was written, it’s likely time for an update.
What Therapists Don’t Need to Do
Let’s be clear about what this doesn’t mean:
You don’t need to rewrite HIPAA
You don’t need to scare clients
You don’t need to rush into changes without understanding them
Thoughtful review and alignment are far more important than urgency.
A Grounded Next Step
If you’re unsure whether your NOPP still fits your practice, the most helpful next step is simply reviewing it alongside how your practice actually runs today. For many clinicians, small updates and clearer language are all that’s needed.
And if you’re supporting associates, interns, or working in a group practice, consistency across documents becomes even more important.
Final Thought
HIPAA updates don’t have to feel overwhelming. When approached thoughtfully, this is really about clarity — for clients and for clinicians. Clear documents create safer, steadier practices for everyone involved.
If you’re feeling unsure, you’re not behind. You’re paying attention — and that matters.
