Tag: the privacy rule requires that the npp