Comprehensive HIPAA policies customizable for security
Protect patient data with customizable HIPAA privacy and security policy templates to help your organization comply with the HIPAA Privacy, Security, and Breach Notification Rules.
What's included in our HIPAA policy templates

Customizable HIPAA privacy and security policy templates.
HIPAA privacy policies and procedures
Patient Rights
- Accounting of Disclosures of Protected Health Information
- Amendment of Protected Health Information
- Complaints
- Notice of Privacy Practices
- Patient Access to Protected Health Information
- Request for Alternative Communication
- Restrictions to Permitted Uses and Disclosures of Protected Health Information
Uses and Disclosures of Protected Health Information
- Authorization for Release of Protected Health Information
- Disclosure of Alcohol and Substance/Drug Abuse Records
- Marketing and Fundraising
- Minimum Necessary for Uses and Disclosures of Protected Health Information
- Responding to Subpoena and Court Order
- Use and Disclosure of Limited Data Sets
- Uses and Disclosures of Protected Health Information for Research
- Uses and Disclosures of Protected Health Information for the Directory
- Uses and Disclosures of Protected Health Information Permitted and Required by Law without Authorization
General Rules
- Business Associate and Business Associate Agreement
- Emailing Protected Health Information
- Faxing Protected Health Information
- Personal Representatives
- Safeguarding and Storing Protected Health Information
- Verification of Identity and Authority of Persons Requesting Protected
Health Information
- Administrative
- Breach of Protected Health Information and Breach Notification
- De-Identification of Protected Health Information
- Designed Record Set
- Privacy Official Designation
- Sanctions
Documentation
- Destruction of Protected Health Information
- Retention of Protected Health Information
HIPAA security policies and procedures
- HIPAA Information Security Policy
- Business Associate Compliance Monitoring
- Business Continuity Plan
- Business Impact Analysis
- Data Integrity Procedures
- Employee Handbook
- Firewall Configuration Standards
- Incident Response
- Job Descriptions
- Network Time Protocol (NTP) Configuration Procedures
- Operating Procedures
- Physical Security Procedures
- Risk Treatment Proposal
- Security Awareness Training Procedure
- Vulnerability Discovery and Risk Ranking
- Workstation Functions
Pathway to HIPAA privacy and security policy implementation
01
Document policies and protect business associates
Your data is one of your most important assets. Without proper policies in place, your employees may do things to place your data in jeopardy.
SecurityMetrics HIPAA privacy and security policies help you with correct documentation on security practices, processes, and policies to protect your organization from data theft and achieve compliance with HIPAA regulations.
Our policies include a Business Associate Agreement template to help you and your BAs stay protected.
02
Implement policies
A policy is only as good as its enforcement. As you implement, share, and monitor privacy and security policy guidelines throughout your organization you may run into questions. SecurityMetrics templates are customizable to match your organization, this helps ensure all necessary points are addressed and you are implementing compliance mandates correctly.
SecurityMetrics support representatives work with you to ensure understanding and proper policy implementation.
03
Review policies
Your privacy and security policies need to be reviewed on a regular basis to ensure they are updated with changes in your business. This also helps ensure your employees don't forget the important policies and procedures. SecurityMetrics is available to periodically help you review policies and revise when necessary.
04
Remediation, Report on Compliance (ROC)
After remediation and retesting, SecurityMetrics will submit your attestation of Compliance (AOC) and Report on Compliance (ROC) to any required parties, such as the card brand or merchant bank.
Our HIPAA privacy and security policies help you protect your organization and achieve compliance

Find out what HIPAA policies you need.
Request A QuoteResources
The following are related resources that we have prepared for you. Find more answers to your questions in our Learning Center.