Notice of Privacy Practices
One of the must fundamental requirements of HIPAA, something we are all familiar with from going to our own doctors, is the Notice of Privacy Practices. This is a document that every "covered entity" is required to provide to its patients at least once, and to have posted in the office somewhere in plain view. This notice tells your patients what you can or may do with their protected health information (PHI) and what you will not do with it. You need to indicate within the patient record in some manner that the patient has received this notice from you.
Here is a sample Notice of Privacy Practices you can use if you wish to satisfy this Federal legal requirements.