What to Do When a Patient Refuses to Sign the Notice of Privacy Practices

Your front desk or patient-check-in staff have probably encountered stressful situations where a patient refuses to sign the notice of privacy practices (NPP) acknowledgment. They may hear comments like:

• I’m not signing anything.
• I don’t give this office permission to share my information.
• I don’t trust HIPAA forms.
• You can’t make me sign this.

The good news is that this situation is very common, and HIPAA tells us exactly how to handle it. Once you understand what the acknowledgment is and what it isn’t, you can confidently move the check-in process forward.

What is the notice of privacy practices?

The notice of privacy practices (NPP) is a document every practice must provide its patients about its privacy responsibilities and the patient’s rights.

Specifically, it explains:

• How the practice may use and disclose protected health information (PHI).
• How the practice protects patient information.
• The patient’s privacy rights under HIPAA.
• Who patients can contact if they have questions or want to file a complaint.

What is the patient actually signing?

This is where most of the confusion begins. Patients are not signing the notice of privacy practices. Instead, they’re signing an acknowledgment of receipt, which simply confirms that they were provided the notice, as required by HIPAA.

You can think of the notice as an information sheet—not a permission slip. Here’s a simple way to illustrate this. Imagine a package is delivered to your home. When you sign for it, your signature confirms you received the package. It doesn’t mean you agree with what’s inside the box. The NPP acknowledgment works the same way.

The patient’s signature does NOT:

• Give the practice permission to use or disclose PHI.
• Replace a HIPAA authorization.
• Mean the patient agrees with everything in the notice.
• Waive any of the patient’s privacy rights.

What if the patient refuses to sign?

Patients have the right to refuse to sign the acknowledgment. If that happens, keep the interaction positive, brief, and professional. Many patients simply misunderstand what they’re signing, and a simple explanation often helps.

You might say: “I completely understand your concern. This signature doesn’t give us permission to do anything with your information. It simply confirms that we gave you a copy of our notice of privacy practices today.”

If the patient still refuses after your explanation, that’s okay. Your responsibility is to offer the notice, not to convince the patient to sign it.

Documentation is important.

Although patients don’t have to sign the acknowledgment, HIPAA does require covered entities to make a good faith effort to obtain it. If the patient refuses, document the refusal according to office policy. An example documentation format follows:

• “The notice of privacy practices was offered.”
• “The patient declined to sign the acknowledgment.”
• [Include the reason for the refusal or whether the patient provided one.]
• [Cite your office policy calling for documentation of a patient’s refusal to sign.]

This documentation shows that the practice followed the HIPAA requirements even though the patient chose not to sign. (Think of it as documenting that you completed your part of the process.)

Can I still treat the patient?

Yes, the patient can still be treated if they refuse to sign the acknowledgment. One of the biggest misconceptions among patients and staff is that a patient must sign the acknowledgment before they can receive care. That’s not how HIPAA works.

A patient who refuses to sign the acknowledgment can still:

• Be seen by the provider
• Receive treatment
• Have prescriptions sent to the pharmacy
• Have claims submitted to their insurance company
• Receive referrals to specialists when appropriate

The Bottom Line

Your office is not violating HIPAA if a patient does not sign the NPP acknowledgment, and a refusal to sign should not disrupt care. A signature only confirms the patient was offered the notice of privacy practices; it is not a HIPAA authorization.

Here’s a simple checklist for staff faced with a patient refusing to sign a NPP document:

• Offer the notice of privacy practices.
• Provide a simple explanation: the signature confirms receipt, not permission.
• Answer questions in a brief, supportive way.
• Respect the patient’s decision if they still refuse.
• Document the refusal according to office policy.
• Continue with the check-in process and the patient’s visit.