How to Distribute Your NPP at the First Patient Visit
NPP Generator Research Team · April 25, 2026 · 5 min read
Key Takeaways
- ✓ Provide the NPP no later than the patient's first service date
- ✓ Make a good-faith effort to get written acknowledgment — but a refusal doesn't block treatment
- ✓ Document every delivery and every refusal in the patient's record
- ✓ Electronic delivery (email, portal) is valid for telehealth and in-person practices
- ✓ Returning patients only need a new NPP when you issue a materially revised version
The HIPAA Privacy Rule requires covered entities to provide each patient with a Notice of Privacy Practices "no later than the date of first service delivery" — 45 CFR § 164.520(c)(1). Getting this right protects you from OCR enforcement and ensures patients understand how their health information is used.
The distribution requirement in plain language
The rule has three components for in-person health care providers:
- Provide the NPP — a copy of the full NPP must be given (or made available electronically) to each new patient
- Request written acknowledgment — ask the patient to sign or confirm receipt; this is separate from consent to treatment
- Document your efforts — if the patient refuses to acknowledge, note it in the record and continue treatment
For emergency situations where it is not practicable to provide the NPP before service, you must provide it as soon as reasonably practicable after service.
In-person distribution methods
- New patient intake packet. Include the NPP in your standard new patient paperwork with a separate signature line for acknowledgment. This is the most common approach.
- Check-in kiosk or tablet. If you use a digital intake system, include the NPP as a required screen with an acknowledgment tap or electronic signature.
- Front desk handout. For walk-in settings (urgent care, retail health), hand the NPP to each patient at check-in registration with a request to sign the acknowledgment.
- Online pre-visit intake. If patients complete intake forms before arrival, include the NPP in the online intake flow with an electronic acknowledgment. This satisfies both the distribution and acknowledgment requirements.
Electronic distribution for telehealth
Telehealth practices may distribute the NPP electronically before or at first service. Valid methods:
- Patient portal. Include the NPP in the portal onboarding flow. The patient clicks through to view the full NPP and checks a box acknowledging receipt.
- Email before first session. Send the NPP as a PDF attachment or link before the first appointment. Request an email reply confirming receipt — this documents the acknowledgment.
- Intake form software. Platforms like IntakeQ, SimplePractice, or TherapyNotes can embed the NPP in the intake form with a required acknowledgment field.
For electronic distribution, you must ensure the patient can actually access and retain the NPP. Sending a link that requires a login the patient hasn't yet set up does not satisfy the requirement.
Acknowledgment vs. consent
Patients often confuse NPP acknowledgment with consent to treatment or consent to disclose information. Clarify for your staff:
- The NPP acknowledgment is only an acknowledgment of receipt — the patient is confirming they received the NPP, not agreeing to anything
- It is not consent to treatment, consent to share records, or a waiver of any patient rights
- A patient who refuses to sign the acknowledgment retains all HIPAA rights — and you must still treat them
What to document
HIPAA requires that you retain documentation of NPP distribution for 6 years. At minimum, document:
- The date the NPP was provided (or attempted)
- The method of delivery (paper, email, portal, kiosk)
- Whether written acknowledgment was obtained
- If acknowledgment was refused: a note documenting the refusal and any good-faith attempts made
Many practices include a line on the acknowledgment form itself: "If patient refused to sign, staff must document reason below." This creates the documentation trail HIPAA requires.
Returning patients and revised NPPs
You do not need to re-provide the NPP at every visit. For a returning patient, you are only required to redistribute the NPP when you have issued a materially revised version — one that changes how you use or disclose PHI, changes patient rights, or reflects other material updates. When that happens, you must provide the revised NPP to existing patients who have an ongoing relationship with your practice and update your website. See how to issue a material change notice.
Quick answer
Include the NPP in your new patient intake paperwork (paper or digital) with a separate acknowledgment signature. Document the date, method, and outcome for every new patient. If a patient declines to sign, note it and treat them anyway.
Need an NPP ready for your intake packets?
NPP Generator produces an HHS February 2026 compliant NPP as a clean PDF and editable Word document. Ready to include in your intake paperwork the same day. $49 one-time, no subscription.
Generate your NPP — $49Free watermarked preview available. See sample →
Frequently Asked Questions
When must you provide the NPP to a patient?▼
No later than the first service date under 45 CFR § 164.520(c)(1). For in-person practices, this is at check-in or in the intake packet. For telehealth, via email or portal before or at the first session.
What if a patient refuses to sign the NPP acknowledgment?▼
Document the refusal and your good-faith attempt to obtain acknowledgment. Then provide care as normal. The NPP refusal does not affect the patient's rights or your obligation to treat them. See what to do if a patient refuses.
Can I email the NPP before the first appointment?▼
Yes. Electronic delivery before or at first service is valid. The patient must be able to access and retain the NPP. Request an email reply or portal acknowledgment to document receipt.
How long do I need to keep NPP acknowledgment records?▼
Six years from the date of creation or the date it was last in effect, whichever is later — the standard HIPAA documentation retention period under 45 CFR § 164.530(j).