(a)Standard: Notice of privacy practices - (1)Right to notice. Except as provided by paragraph (a)(3) or (4) of this section, an individual has a right to adequate notice of the uses and disclosures of protected health information that may be made by the covered entity, and of the individual's rights and the covered entity's legal duties with respect to protected health information. (2)Notice requirements for covered entities creating or maintaining records subject to 42 U.S.C. 290dd-2 . As provided