HIPAA Compliance Tools
HIPAA compliance tools are used as part of the HIPAA compliance process, for example, forms and notices, and to measure HIPAA compliance, for example, assessment tools or checklists that guide covered entities and business associates through the basics of HIPAA compliance.
The HIPAA Journal has a number of free resources that help HIPAA-Covered Entities with their HIPAA compliance.
HIPAA Business Associate Agreement Template
This downloadable template provides a reference for what should be contained in a HIPAA Business Associate Agreement.
Click to Download HIPAA Business Associate Agreement Template
(Word document, 18K)
HIPAA Release Form
Releasing medical records without a HIPAA authorization form is a HIPAA violation.
Click here for HIPAA release form
(free PDF document – Opens directly in the browser)
Two US states have their own forms
Click here for California HIPAA release form
Click here for Texas HIPAA release form
HIPAA Notice of Privacy Practices
HHS’ Office for Civil Rights has produced a Notice of Privacy Practices template that is free to download.
Instructions for NPPs
- Health Plan Instructions – PDF
- HC Provider Instructions – PDF
- Questions and Instructions for using the Model Notices – PDF
NPP For Healthcare Providers
- NPP Booklet – HC Provider – PDF
- NPP Layered – HC Provider – PDF
- NPP Full Page – HC Provider – PDF
- NPP HC Provider – Text Version
NPP For Health Plans
- NPP Booklet – Health Plan – PDF
- NPP Full Page – Health Plan – PDF
- NPP Layered – Health Plan – PDF
- NPP Health Plan – Text Version
HIPAA Logos and Badges

Click here to download the above logo

Click here to download HIPAA badge
A range of HIPAA logos and badges is available for direct download here.
Staff HIPAA Awareness Assessment Tool
Measure your organization’s HIPAA awareness with a free HIPAA training assessment
This assessment has been designed for a small group of selected employees in your organization to take. This will usually range from 10 to 50 employees. Once completed you will be able to see the precise level of HIPAA awareness in your organization through a real-time dashboard.
Click here to read more about assessing staff HIPAA awareness.
HIPAA Audit Checklist
The HIPAA Journal has produced a checklist for starting a HIPAA audit.
HIPAA Compliance Software Buyer’s Guide
The HIPAA Journal has produced a free buyer’s guide to choosing HIPAA compliance software.
HIPAA Compliant Email Buyer’s Guide
The HIPAA Journal has produced a buyer’s guide to choosing HIPAA-compliance email.
HIPAA Risk Assessments
The legal requirement for a HIPAA risk assessment is in the Security Rule (45 CFR § 164.308– Security Management Process) and also the Breach Notification Rule (45 CFR § 164.402).
Click here to read about HIPAA Risk Assessments and download a free checklist

