The Health Insurance Portability and Accountability Act of 1996 (HIPAA), requires each patient is provided with a Notice of Privacy Practices(NPP), to the health care organization's patients. The goal of the NPP is to inform patients: 1. ... the covered entity's duties with respect to apatient's PHI.