Hearty Heart Clinic is revising their notice of privacy practice and to save space to keep their NPP to one page they decided to leave out the statement, “all other use and disclosures not listed in the NPP will require an authorization.”
Question: Is there a violation? As a new HIM manager to Hearty Heart Clinic you are responsible to review all the legal documents. What would you do when reviewing their NPP?