SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/hipaa-npp-first-service

When must a provider with a direct treatment relationship give a patient its Notice of Privacy Practices?

By the first service delivery.

Start playing free

  1. Within 60 days of the first visit
  2. Only when the patient asks
  3. No later than the first service delivery ✔

Why: The notice must be given no later than the first service, including services delivered electronically. In an emergency, it's given as soon as reasonably practicable afterward.

Huh, didn't know that: The notice must open with a required header that starts "THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED."

The dad joke
Why did the clipboard go to the front desk? To get a little more organized.
Like this card?
Play the game

References

Answer: No later than the first service delivery. The notice must be given no later than the first service, including services delivered electronically. In an emergency, it's given as soon as reasonably practicable afterward.

  1. 45 CFR 164.520 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.520
    No later than the date of the first service delivery, including service delivered electronically
    Checked 2026-10-10.
  2. 45 CFR 164.520 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.520
    make a good faith effort to obtain a written acknowledgment of receipt of the notice
    Checked 2026-10-10.
  3. 45 CFR 164.520 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.520
    THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Work SkillsDoes HIPAA protect patient information that is spoken out loud, or only paper and computer records?Work SkillsA hospital's HR office keeps Dana's pre-hire physical in Dana's personnel file, as the employer. Is that file PHI?Work SkillsFor how long after a person dies must a covered entity keep protecting that person's health information?

That's stuff everyone should know.