List the requirements for the medical office privacy policy.

Notice must be in plain language.

How the covered entity may use and disclose protected health information about an individual. The individual's rights with respect to the information.

How the individual may exercise these rights.

How the individual may complain to the covered entity.

The covered entity's legal duties with respect to the information, including a statement that the covered entity is required by law to maintain the privacy of protected health information. Whom individuals can contact for further information abou t the covered entity's privacy policies.