HIPAA & Privacy
Release forms, compliance checklists, BAA templates, and in-depth guides on Privacy Rule, Security Rule, and platform compliance.
FIG · 01Start here
First-party resourcesGenerate a Notice of Privacy Practices in the browser, free and printable
Pre-populates the 45 CFR §164.520 required content (uses, disclosures, patient rights, complaint contacts) and lets you customize for your practice. No email signup, no PDF download wall.
Open the generatorHIPAA Minimum Necessary Rule explained with role-based access matrix
Plain-language walkthrough of 45 CFR §164.502(b), including a sample role-access matrix you can adapt and three real enforcement cases that turned on this standard.
Read the guideTools
6 toolsHIPAA Release Form Generator
Generate authorization forms for releasing protected health information
HIPAA Compliance Checklist
Interactive checklist covering Privacy, Security, and Breach Notification rules
Notice of Privacy Practices Template
Create a Notice of Privacy Practices covering patient rights and data handling
Business Associate Agreement Template
Generate Business Associate Agreements with customizable provisions
HIPAA Fine Calculator
Estimate civil penalty exposure by culpability tier, violation count, and years using current adjusted amounts
HIPAA Policies & Procedures Template
Build a printable policy manual: privacy officer, minimum necessary, access, incidents, BAs, retention
Guides
15 articlesWho Does HIPAA Apply To?
Covered entities, business associates, and who falls outside HIPAA
Read guideHIPAA Minimum Necessary Rule
How to apply the minimum necessary standard to PHI disclosures
Read guideIs Zoom HIPAA Compliant?
BAA requirements, encryption settings, and configuration steps
Read guideIs Gmail HIPAA Compliant?
Google Workspace BAA and settings needed for compliant email
Read guideIs WhatsApp HIPAA Compliant?
Why WhatsApp fails HIPAA requirements and what to use instead
Read guideIs Microsoft Teams HIPAA Compliant?
Microsoft 365 BAA and Teams configuration for compliance
Read guideIs Google Drive HIPAA Compliant?
Access controls and sharing settings for HIPAA compliance
Read guideMost Common HIPAA Violations
Top violation categories, real penalty examples, and prevention
Read guidePsychotherapy Notes vs Progress Notes
Legal distinctions, storage, and disclosure rules under HIPAA
Read guideIs Slack HIPAA Compliant?
Only with an enterprise plan and BAA, and even then not every feature is covered
Read guideIs Dropbox HIPAA Compliant?
Which Dropbox plans carry a BAA, the settings checklist, and the sharing mistakes that break compliance
Read guideIs FaceTime HIPAA Compliant?
Why FaceTime and iMessage fail HIPAA without a BAA, and what to use for telehealth instead
Read guideHIPAA Violation Penalties & Fines
Current civil penalty tiers, criminal penalties, state actions, and recent OCR enforcement examples
Read guideIs DocuSign HIPAA Compliant?
Which DocuSign plans get a BAA, the envelope settings that matter, and e-signature rules for consent forms
Read guideHow to File a HIPAA Complaint
OCR complaint portal walkthrough, the 180-day window, what happens next, and how practices should respond
Read guide