Which item is NOT described by a Privacy Notice?

• A. Describes the ways the covered entity may use and disclose PHI.
• B. States the covered entity's duties to protect privacy and abide by the terms of the current notice.
• C. Describes individuals' rights to complain to HHS.
• D. The facility's internal staff scheduling protocol.

Answer: (D)

The Notice of Privacy Practices explains how PHI may be used and disclosed, the covered entity’s duties to protect privacy and follow the notice, and individuals’ rights (including how to file complaints with HHS). It does not cover internal administrative workflows like staff scheduling Protocols. Those are operational procedures, not part of what the privacy notice is required to communicate. So the item about the facility’s internal staff scheduling protocol isn’t described by a Privacy Notice.