The HIPAA notice, formally known as the Notice of Privacy Practices, must be provided by health plans to inform individuals about their privacy rights and how their personal health information can be used and shared. It must be provided to all plan members at the time of enrollment and upon request, and a reminder must be sent at least once every three years that the notice is available.