I love how not only do you sign for something that you didn't read. But they can then change the privacy policy without sending you a new copy to agree to.
Under 45 CFR §164.520(c)(2)(iv) any changes must be distributed to patients within 60 days. Additionally unlike most other agreements, for HIPAA notices of privacy practices you do not sign that you agree to the terms rather that you have seen the terms.
Seems a bit odd.