HIPAA policies for your small practice, written for your office in 10 minutes.
Answer a short questionnaire about your practice. Download a complete, custom HIPAA policy kit as editable Word files, updated for 2026. No consultants, no 85 page generic binder, no subscription.
Free preview before you pay. Instant download. 14 day refund if it is not what you expected.
Why practices are updating now
New privacy notice rules
Federal changes for substance use disorder records required every covered entity to update its Notice of Privacy Practices by February 16, 2026. A notice written before 2026 may be out of date.
A bigger Security Rule is coming
HHS has proposed the largest update to the HIPAA Security Rule in 20 years, now expected in 2027. It would make multi factor authentication, encryption, and 72 hour recovery mandatory for every practice, even solo offices. Our Security policies adopt these now, clearly labeled.
The most cited gap
Missing written policies and a missing risk analysis are among the findings HHS cites most often in enforcement actions. The kit includes both.
What you get
Patient facing
- Notice of Privacy Practices (2026)
- Acknowledgment of Receipt
- Authorization, access, amendment, and restriction request forms
Internal policies
- 22 Privacy policies and procedures
- 19 Security policies mapped to the Security Rule
- Breach Notification policy with risk assessment and log
Contracts and records
- Business Associate Agreement
- Workforce confidentiality agreement and training log
- Security Risk Analysis worksheet, pre filled from your answers
- California addendum for California practices
How it works
Answer about 20 questions
Practice name and type, who your Privacy and Security Officers are, and how you communicate with patients.
Preview it free
See your personalized privacy notice and the full document list before paying anything.
Download instantly
Pay securely through Stripe and download editable Word files right away, with a step by step adoption checklist.
Pricing
Notice of Privacy Practices
- Notice updated for the 2026 rules, written for your practice
- Acknowledgment of Receipt form
- Editable Word files
Full HIPAA Policy Kit
- Everything in the notice package
- Privacy, Security, and Breach policies
- BAA, workforce forms, risk analysis, patient forms
- Start Here adoption checklist
Compliance consultants commonly charge hundreds to thousands of dollars for policy packages. Generic template suites sell for $300 to $500 and still need you to fill in every blank.
Questions
Is this legal advice?
No. The kit is a set of templates generated from your answers. Using templates does not by itself make a practice compliant; you also need to follow the policies, train your staff, and keep records. We strongly recommend having a health care attorney review the kit before you adopt it.
Who is this for?
Small medical, dental, behavioral health, chiropractic, therapy, optometry, and med spa practices, typically 1 to 50 staff, that need written HIPAA policies without hiring a consultant.
Does it cover state law?
The kit covers federal HIPAA. California practices also receive a California addendum. Other states may have additional rules, which is one more reason to have counsel review the kit.
Can I edit the documents?
Yes. Everything is delivered as Microsoft Word files you can edit, print, and sign.
What if I need to download again?
Keep your confirmation page link. It works any time you need to download the kit again.
Refunds?
If the kit is not what you expected, email us within 14 days of purchase for a full refund.
Guides
Not legal advice. Eaglizer IT is not a law firm and does not certify HIPAA compliance. Templates are provided to help practices build their own compliance program.