400
Written notification which must be signed by the patient/legal representative, that communicates how PHI is used, disclosures made without the need for authorization, the patient's rights regarding PHI, the persons to whom PHI may be released and the covered entity's legal duties with respect to that information.
What is "Notice of Privacy Practices (NPP)."