Abstract
By April 14, 2003, NPs must comply with new federal regulations that protect the privacy of patient health information. The government issued the regulations in response to several large-scale breaches of patient privacy. This article discusses how NPs can apply the regulations in an office-based practice or clinic, explaining the who, what, where, why, when. and how of the requirements. Using the sample consent, authorization, and notice forms, NPs can draft similar documents to ensure their compliance.