A HIPAA Policy. This policy helps maintain the confidentiality of medical information about patients and all employees must read the policy when starting a position that deals with such sensitive information. They then must sign a Privacy or Confidentiality Statement to acknowledge that they have read the Policy and agree to adhere to it.