Digital Privacy Notice Challenge FAQs

• Visit the Ideas page to view the entries and vote for your favorite.
• You may vote only once for each entry. To do so please click on the I agree button in the upper left corner of the entry.
• You are not allowed to vote multiple time for the same entry.

The customizable content refers to content specific to the provider or health plan, and to any additional language required by the state (the language contained in the paper NPP pertains nationally).

The ability for users to customize the content of the digital notice is an important part of the functionality of the digital notice. First, it is necessary for users to include information unique to their entity, such as organization name, contact information or the name and contact information of their privacy officer. Additionally, entities may need to describe state laws or other policies they follow that are stricter than, or beyond what is required by, HIPAA. Because the model Notice of Privacy Practices language reflects the HIPAA requirements, such entities would need to add language to the model notice in order to accurately communicate how health information is used and disclosed by their organization. Entities that belong to an organized health care arrangement (OHCA) will need to add language describing how information is shared with the OHCA and what other entities may be covered by the notice. And finally, entities will need to be able to insert an effective date of notice. Another aspect of customization that is desirable is the ability for users to easily create links from various sections of the notice to other content on their websites with relevant background information. For example, the portion of the digital notice describing how information may be used for research could link to that organization’s actual research page, where additional content would explain what type of research is conducted by the organization and provide relevant information and context. Alternatively, an organization may have online forms for individuals to use when submitting a complaint or requesting information, and it would be desirable to enable the user to easily link from the language in the digital notice describing these rights to the actual online forms used by the patient when acting on these rights.

“Entity” refers to the health care provider or health plan using the module.

Participants do not have to submit different designs for each of those formats. The challenge is to present the same textual information but in a way suitable for online consumption. The verbiage does differ slightly, however, between the healthcare provider and health plan language, and the modules should account for both.

Yes this is the correct way to submit an entry.

Entries will be shown on the website for two weeks after the submission period has closed to allow public voting.

The PP should be uploaded by clicking on the “browse file”. The link to entry field is optional.

Modules submitted by participants should provide content for both providers and healths plans and enable either type of user to customize it as appropriate for their organization.

We have now added Spanish language versions of the model notices of privacy practices that you can use to submit a model in Spanish. These are available along with the English versions on the Model NPP website at http://www.hhs.gov/ocr/privacy/hipaa/modelnotices.html.

Yes, both are acceptable.