@2018 All rights reserved. HIPAA § 164.520 Notice of privacy practices for protected health information  provides:
(3) Specific requirements for electronic notice. (i) A covered entity that maintains a web site that provides information about the covered entity's
customer services or benefits must prominently post its notice on the web site and make the notice available electronically through the web site.