HIPAA templates and staff training
The documents HIPAA expects you to have, and the training it expects your team to complete — ready to fill in and run, without hiring a consultant.
What we're building
hipaa.systems is preparing two products: a set of HIPAA policy and form templates that a small practice or health tech company can complete in about a day, and a 45–60 minute online HIPAA training course with certificates and completion records. They will be reviewed by a qualified professional before release. Everything else on this site stays free.
| Templates | Policies, risk analysis workbook, Notice of Privacy Practices, BAA, breach plan, forms |
|---|---|
| Training | Online course, role-based modules, quizzes, certificates, completion log |
| For | Small practices and companies that become business associates |
| Status | In preparation |
| Review | Checked by a qualified professional before release |
HIPAA templates
The written documents HIPAA requires, mapped to the rule they satisfy, with instructions for filling them in:
- Privacy and Security Rule policies and procedures
- Security risk analysis and risk management workbook
- Notice of Privacy Practices
- Business associate agreement
- Vendor and BAA register — pre-filled with the BAA facts from this site
- Breach response plan and four-factor assessment form
- Forms: authorization, training acknowledgment, sanctions, patient records requests
Two editions: one for small practices, one for software and services companies that handle PHI for their customers.
HIPAA staff training
An online course your whole team can complete on their own time:
- Seven short modules: HIPAA basics, sharing PHI, patient rights, security, email and messaging, incidents, roles
- A quiz after each module and a dated certificate at the end
- A completion log for the practice owner — the training records HIPAA asks you to keep
Why not just use free materials?
HHS publishes useful free samples, and we link to them throughout this site. What they don't give you is a complete, connected set: every document tied to the rule it satisfies, instructions for a small organization, a vendor register that already knows which tools sign a BAA, and training that matches your own policies.
Until then
Start with the free HIPAA compliance checklist and therelease form guide. Our products are not legal advice; have counsel review anything you rely on.