A HIPAA Notice of Privacy Practices must be provided to new group health plan participants at the time of enrollment and within 60 days of a material revision. In addition, participants must be notified of the availability of the notice at least once every three years. This requirement can be satisfied by distributing either a copy of the notice or a reminder of the availability of the notice. A reminder of the availability of the notice can be included in annual enrollment materials or other plan publications sent to all participants. For example, group health plans that distributed a new Notice of Privacy Practices in 2013 when the final HIPAA regulations were issued should ensure they have satisfied this reminder requirement in 2016.