A Standard Document sample notice of privacy practices (NOPP or NPP) that Health Insurance Portability and Accountability Act (HIPAA) covered entities (CEs) must provide to an individual explaining the CE's privacy practices and how the CE may use and disclose the individual's protected health information (PHI). This notice focuses on health care providers and complies with HIPAA's requirements. It does not address any applicable state law requirements. This Standard Document has integrated drafting notes with important explanations and drafting tips.