HIPAA also requires
NPI must be used Tells us how to disclose patient information Must provide written notification of privacy policy Can disclose as minimal as necessary information about the patient to other professional Call employees must be trained