The following items must be reflected in Notices of Privacy Practices: (i) a description of the types of uses and disclosures that require an authorization; (ii) a statement that other uses and disclosures not described in the notice will be made only with the individual???s written authorization; (iii) a statement that an individual may revoke an authorization; (iv) if the group health plan inten