HIPAA Notice of Privacy Practices for Home Health Agencies
Home health agencies are HIPAA covered entities. Whether you provide skilled nursing, physical therapy, occupational therapy, or personal care services — and bill Medicare, Medicaid, or private insurance electronically — you need a compliant Notice of Privacy Practices aligned to the HHS February 2026 model.
Quick facts for home health agencies
- Medicare-certified home health agencies are HIPAA covered entities — the NPP is mandatory
- The NPP must be provided at the first service visit — typically the initial intake assessment
- Your NPP must be updated to the HHS February 2026 model
- Patients who cannot sign for themselves — NPP must still be provided to their personal representative
- If you also operate a hospice or behavioral health component, verify whether separate NPPs are needed
Home health and HIPAA covered entity status
Home health agencies are covered entities under HIPAA because they transmit health information electronically as part of claims submission for Medicare and Medicaid services. The Medicare Conditions of Participation (CoPs) for home health agencies also mandate patient rights documentation, which runs parallel to the HIPAA NPP requirement.
Agencies that provide only non-medical personal care services (aide services billed through Medicaid waiver programs without health care claim transmission) may occupy a different compliance position — but most home health agencies that provide any skilled nursing or therapy services will qualify as covered entities.
Home health–specific NPP distribution challenges
Home health agencies face a unique distribution challenge: unlike a clinic, there is no physical waiting room where the NPP can be prominently posted. Best practices for home health NPP distribution include:
- Intake packet delivery. Include the NPP in every new patient intake packet, delivered at the initial assessment visit
- Personal representative delivery. For patients who cannot sign, provide the NPP to their legal representative and obtain acknowledgment
- Website posting. Post the full NPP on your agency website — required for agencies with a web presence
- Electronic delivery option. For patients who prefer electronic communication, NPP can be emailed with acknowledgment requested by return email
- Documentation of good-faith attempts. Document every attempt to get acknowledgment, including refusals
What your NPP must include
- Uses and disclosures — treatment coordination with physicians, payment to Medicare/Medicaid/insurers, and operations
- Patient rights — access to records, requests for amendment, accounting of disclosures, right to restrict disclosures to health plans for services paid out of pocket, and right to receive confidential communications
- Contact information for your Privacy Officer
- Complaint procedure including HHS OCR contact information
- Effective and supersede dates
Frequently Asked Questions
Do home health agencies need a HIPAA NPP?▼
Yes. Home health agencies are HIPAA covered entities and must provide a Notice of Privacy Practices to each patient at the first service visit. The NPP must also be posted on your website under 45 CFR § 164.520.
When is the NPP "first service" for home health?▼
The first service delivery for home health is typically the initial intake or assessment visit. The NPP should be provided at that visit, not at a later skilled care visit. Include acknowledgment in your intake documentation.
Does a home health aide (HHA) service need an NPP?▼
If the home health aide service is provided by an agency that submits electronic claims to Medicaid or insurers, the agency is likely a covered entity. Non-medical personal care agencies that do not submit health care claims electronically may not be covered entities — but this is a facts-and-circumstances analysis.
Do we need separate NPPs for different services (skilled nursing vs. therapy)?▼
No. A single agency operating under one legal entity uses one NPP for all of its services. If your agency and your affiliated hospice are separate legal entities, each entity needs its own NPP.
Generate your home health agency NPP in under 5 minutes.
HHS February 2026 model, PDF + editable Word. Include in your intake packets and post on your website. $49 one-time — no subscription.
Start your NPP — $49Free watermarked preview available. See sample →