A dated notice with all sixteen required content elements attested, tied to your current privacy officer, posted where it applies, with client acknowledgment coverage computed from your roster.
Almost every clinic has a Notice. Far fewer can say when it was last revised, whether it still describes how they actually operate, or how many families ever acknowledged receiving it.
The Notice does not run through the policy composer. It has its own module, because a Notice has obligations no other document carries: it is given to families, posted publicly, acknowledged individually, and reissued when your practices change.
Six signals:
The officer tie is subtle and useful. A Notice naming a privacy officer who no longer holds the role is stale in a way that is easy to miss, and this catches it.
Acknowledgment coverage is computed from acknowledgment records against enrolled clients, and a documented good-faith attempt counts, as the rule permits. That means coverage reflects your records, not proof that a document reached every family’s hands.
The content check is an attestation that each of the sixteen elements is present. It does not read your Notice and evaluate whether the language is legally sufficient.
A dated Notice with a version history, since revisions issue as new dated versions rather than edits to the live copy. A content checklist attested element by element. Acknowledgment coverage across your client roster. An annual review record. For a document most clinics have not opened in years, evidence that yours is current.
The regulation: read the rule behind this control.
No pressure, no pitch. Book a 20-minute call, or just email a question and we'll point you the right way.