Update your HIPAA Notice of Privacy Practices to the HHS February 2026 model
Your existing NPP almost certainly needs a refresh. The HHS February 2026 revised model added 42 CFR Part 2 SUD language, clarified reproductive-health disclosures, and refined individual-rights request language. We generate the revised notice in under 5 minutes — and we can read your existing NPP to pre-fill your entity info so you don't have to re-type.
$49 one-time · No account required for preview · Clean PDF + editable Word · 30-day re-download window · Privacy details for uploads
Why your existing NPP is out of date
Part 2 SUD integration
The 2024 Part 2 Final Rule lets entities that are both HIPAA covered entities and 42 CFR Part 2 programs publish a single integrated notice — but the integration requires specific disclosures (written-consent requirement, redisclosure prohibition, court-order protections). A pre-2026 NPP almost certainly doesn't have this language.
Reproductive-health disclosures
Post-Dobbs HHS clarifications address law-enforcement and investigation disclosures involving reproductive healthcare PHI. The revised model notice makes these boundaries explicit in language patients can actually understand.
Individual-rights refinements
The 2023 HIPAA Privacy Rule amendments refined how individuals can request access, amendment, accountings, and restrictions. The February 2026 model notice rewrites these sections in plain language and clarifies electronic-copy rights under § 164.524.
The deadline has passed
Every HIPAA covered entity was required to have an updated NPP in place by February 16, 2026. Continuing to distribute a pre-2026 notice is a Privacy Rule violation. OCR enforcement actions routinely cite outdated NPPs among their findings, especially when surfaced during breach investigations or compliance audits.
How the update flow works
-
1
Tell us you're updating
First wizard question: "Are you updating an existing NPP or creating a new one?" Select update and we'll tune the output to include a "supersedes prior notice" reference.
-
2
Re-enter your entity info
Entity type, organization name, address, Privacy Officer, website URL. Takes about 3 minutes. For most practices the Privacy Officer and address haven't changed — copy straight from your existing NPP.
-
3
Enter the supersede date
The effective date of your existing NPP (the one the new notice will replace). If you don't remember the exact date, a month and year is fine. This appears at the top of the generated document as "This notice supersedes our prior Notice of Privacy Practices dated X."
-
4
Download and redistribute
Clean PDF and editable Word. Post the revised notice on your website and at your physical service sites immediately. Provide it to patients at their next visit. For health plans, distribute to members within 60 days of the effective date.
$49. 5 minutes. Compliant NPP.
Same price whether you're updating or starting fresh. No subscription. No account for the free preview.
Update my NPP nowCommon update questions
What if I don't remember my prior NPP's effective date?
A month and year approximation is fine. The supersede date is a courtesy to patients so they can identify which version of your notice was in effect when — it's not a strict HIPAA requirement under § 164.520. If you can't find the prior effective date at all, you can leave it blank and the output still works.
Do I need to redistribute to every patient who ever got the old notice?
No. Direct-treatment providers must (a) post the revised notice on the website immediately, (b) post at each physical service site, and (c) provide it to patients at their next visit after the effective date. You do not have to individually mail the revised notice to every historical patient — unless you've voluntarily agreed to do so in a prior commitment. Health plans have a separate rule: revised notice goes to plan members within 60 days of a material change.
Is an acknowledgment of receipt required again for patients who already acknowledged the old notice?
Under § 164.520(c)(2)(ii), the acknowledgment requirement applies at first service delivery. A returning patient who acknowledged your prior NPP does not need to re-acknowledge the revised notice. New patients after the revised-notice effective date do need to acknowledge the new version.
Can I just edit my existing Word document?
You can, but the changes are substantial — Part 2 integration, reproductive-health clarifications, individual-rights refinements, and usually a Section 1557 taglines appendix. Most practices find it faster to regenerate from the HHS February 2026 model than to hand-edit their 2013-era template. Our generator is $49 vs. the hours of careful clause-by-clause editing against the revised model.
What about state-law requirements stricter than HIPAA?
California, New York, Massachusetts, and others impose stricter privacy notice rules on top of HIPAA. Our generator includes a generic state-law disclaimer but does not produce state-specific language. If you practice in a state with heightened mental-health, SUD, HIV, or genetic-information rules, consult healthcare counsel for the state-specific additions. See our state-law guide.
Ready to update?
One click opens the wizard pre-set to the update flow. $49, 5 minutes, compliant notice delivered as clean PDF and editable Word.
Update my NPP — $49