What document must be provided to patients that outlines their rights regarding PHI?

The document that must be provided to patients outlining their rights regarding Protected Health Information (PHI) is the Privacy Notice. This notice is a critical component of the Health Insurance Portability and Accountability Act (HIPAA) regulations, which ensure that individuals are informed about how their personal health information can be used and disclosed by healthcare providers and health plans.

The Privacy Notice includes essential information such as the types of PHI that may be collected, the purposes for which that information can be utilized, the rights that patients have concerning their own health information (like the right to access and amend it), and how patients can file complaints if they believe their privacy rights have been violated. By providing patients with this document, healthcare organizations are fulfilling their legal obligation under HIPAA and promoting transparency in their practices.

Other options mentioned do not serve this specific purpose. A Patient Agreement typically addresses the relationship between the patient and the provider but does not specifically detail patient rights regarding PHI. A Health Policy Document may outline broader organizational policies but does not focus solely on patient rights as they pertain to personal health information. Lastly, a HIPAA Waiver refers to specific situations where a patient waives certain rights, but it does not serve as a comprehensive outline of rights concerning PHI