The HIPAA "Privacy Rule" requires that all healthcare providers implement a comprehensive approach to protecting the privacy of their patients' protected health information. For many providers, this means a major overhaul in the way they handle patient data.

Developing and revising privacy policies, procedures and required forms may be the single most difficult aspect of HIPAA "Privacy Rule" compliance. Each policy must be specific relative to the Privacy Rules' complex requirements, yet be worded simply enough to be understood by staff and patients alike.