to privacy policy Paragraph (4) does not apply with respect to a privacy policy. (5) Minor changes A covered entity may make minor changes in a notice or consent process or privacy policy approved under paragraph (1) and retain the presumption under paragraph (2) for such process or policy without retesting or resubmission of testing data to the Director. 211. Prohibition on deceptive notice and consent processes and privacy policies In providing notice, obtaining consent, or maintaining a privacy policy as required by this title, a covered entity may not intentionally take any action that substantially impairs, obscures, or subverts the ability of an individual to— (1) understand the contents of such notice or such privacy policy