shall apply with respect to uses and disclosures of information occurring on or after the date that is 12 months after the date of enactment of this Act. (2) Easily understandable notice of privacy practices Not later than 1 year after the date of enactment of this Act, the Secretary of Health and Human Services, in consultation with appropriate experts, shall update section 164.520 of title 45, Code of Federal Regulations, so that covered entities provide notice, written in plain language, of privacy practices regarding patient records referred to in section 543(a) of the Public Health Service Act ( 42 U.S.C. 290dd–2(a) ), including— (A) a statement of the patient’s rights, including self-pay patients, with respect to protected health information and a brief description of how the individual may exercise these rights (as required by paragraph (b)(1)(iv) of such section 164.520)