First, the Final Rule requires the Notice of Privacy Practices to include a description of certain types of uses and disclosures that require an authorization, in addition to the statement that other uses and disclosures not described will be made only with an authorization.