We comply with HIPAA by asking patients to sign a release form and statement of notice at their first visit.
