A sample notice to be provided by a group health plan (that is, a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA)) to an individual explaining the plan's privacy practices and how the plan may use and disclose the individual's protected health information. This notice is designed to comply with HIPAA's requirements, but does not address state law requirements. This Standard Document has integrated drafting notes with important explanations and drafting tips.