In 1996, Congress enacted the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). In January 2013, almost seventeen years after HIPAA was enacted, Congress issued the Final Rule, which was designed to greatly enhance a patient's privacy rights and protections and strengthen the ability of the government to vigorously enforce the HIPAA privacy and security protections. The Final Rule became effective on March 26, 2013, and most compliance obligations were required to be in place by September 23, 2013. This Manual was written for private mental health providers who are practicing in the State of Colorado. In addition to providing detailed guidance on the HIPAA Privacy Rule, this Manual contains twenty forms that practitioners will need to ensure that their practice complies with the HIPAA Privacy Rule.