If you, like a growing number of physician practices, have a website to promote your practice, don’t forget about your obligations under the HIPAA Privacy Rule.

The Privacy Rule requires all physicians with “direct treatment relationships” to provide their patients with a written notice of the privacy practices they use to protect patients’ health information. (Physicians with indirect treatment relationships—such as pathologists or consulting radiologists—do not have to give patients a notice of privacy practices.)

Not only are you required to post your privacy notice prominently in your office where it can be seen by your patients, but you are also required to post the notice on your website and make it available electronically (by fax or e-mail, for example) to patients who request it.

CMA has a number of resources to help physician offices comply with HIPAA. Among those resources is a notice-of-privacy-practices template, available free to members at the CMA members-only website. Members can download the template, which is included in ON-CALL document #1603, “HIPAA ACT SMART: Introduction to the HIPAA Privacy Rule,” at CMA's members-only website. Nonmembers can purchase this and other ON-CALL documents for $2 per page at CMA’s online bookstore. The template has been customized to comply with California-specific privacy laws, as well.

CMA members also get a discount on a comprehensive HIPAA compliance tool kt, from CMA’s HIPAA partner, PrivaPlan. The easy-to-use CD-ROM was specifically designed to meet the needs of California’s solo and small to midsize practices. It includes a step-by-step compliance plan and all the California-specific forms, policies, and procedures you’ll need to maintain HIPAA compliance.

CMA members receive the CD-ROM tool kit for a special discounted price of $325 (nonmembers pay $495). Annual updates are available for a small additional fee. Place your order online or call PrivaPlan at 877/218-7707.

Contact: CMA’s legal information line, 415/882-5144 or legalinfo@cmanet.org.