Final answer:
The Notice of Privacy Practices (NPP) must be provided to patients at the first point of service.
Step-by-step explanation:
The correct statement about the notice of privacy practices is: C. It must be provided to patients at the first point of service. The Notice of Privacy Practices (NPP) is a document that outlines how a healthcare provider or organization will protect a patient's medical information. According to the Health Insurance Portability and Accountability Act (HIPAA), healthcare providers are required to distribute the NPP to patients at their first encounter.