the Notice of Privacy Practice must include all of the following except: