The law requires that providers ask patients in writing to state that they received a copy of the office's HIPAA practices, or that they were offered a copy of the office's HIPAA practices. The law doesn't thate how often, but I see many places that indicate the HIPAA agreement should be signed every 3 years minimum. The ABN is only when they are getting a service that may not be covered by Medicare.