HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT OF 1966
45 CFR 164.520
164.520 Notice of Privacy practices for protected health information
(a) Standard: notice of privacy practices.
(1) Right to notice. Except as provided by paragraph (a)(2) or (3) of this section, an individual has a right to adequate notice of the use and disclosure of protected health information that may be made by the covered entity, and of the individual’s rights and the covered entity’s legal duties with respect to protected health information.