HIPAA preparation resources for small therapy practices

Start with editable paperwork or choose a guided session to work through the kit. These resources support preparation and review; they do not establish or certify HIPAA compliance.

Two routes using the existing therapist kit

$99 · Self-guided kit

The Therapist HIPAA & No-Show Kit contains a risk-analysis worksheet linked to the HHS SRA Tool, 12 privacy and security policies, a notice-customization guide, vendor and BAA trackers, telehealth and breach-response checklists, training sign-off, an annual calendar and cancellation-policy materials.

Review the kit and file formats

$295 · Guided setup session

The 1:1 Setup Session includes the HIPAA & No-Show Kit, a 90-minute remote working session covering risk analysis and policies, and a follow-up email summary of next steps. The listing includes a completed risk analysis and policy set; suitability and any further review depend on your practice.

Review the session scope

The session includes the kit. Check the service listing before purchasing both separately.

A sensible order for the work

  1. Record your practice’s systems, vendors and information-handling activities.
  2. Work through the security risk-analysis worksheet and the linked HHS resource.
  3. Adapt policies, privacy-notice materials and vendor/BAA records to your actual operations.
  4. Assign training, incident-response and annual review responsibilities.
  5. Have qualified counsel review the materials and resolve outstanding gaps.

Important boundaries

A worksheet does not replace the HHS SRA Tool or your risk-management responsibilities. Neither purchasing the kit nor attending a session guarantees compliance or replaces qualified legal advice. Cyhornet is not a law firm and is not affiliated with HHS or other government agencies. No reduction in missed appointments is promised.

Templates and readiness support only. Not legal advice, an audit or an attestation. No compliance or report outcome is guaranteed. Your organization remains responsible for control decisions, implementation and evidence.