Skip to content


The following links are provided to give you access to a variety of tools available for HIPAA assessments, evaluations, development of policies, presentations, etc. This list is not a comprehensive list of all tools or products that may be available and the state does not recommend, endorse or promote the use of any of the listed tools.

Guides, Assessments, Evaluations

Patient Privacy Guidelines reports, articles, compliance products distributed by Atlantic Information Services (AIS).

North Carolina Healthcare Information and Communications Alliance (NCHICA) - a source of extensive HIPAA information and a variety of available HIPAA assessment tools.

PrivaPlan is self-assessment resource kit to help organizations come into compliance with the requirements of the HIPAA Privacy and Security regulations.

Worksmart MD HIPAA RX Compliance Toolkit is primarily intended to assist small-to-medium sized health care providers and physician practices with meeting the HIPAA mandates.


ReadyForHIPAA.Com is a website intended primarily for IT professionals in search of resources and tools to help with HIPAA compliance issues.

HIPAABasics is a web-based self-assessment tool designed to guide an organization through gap analysis, reporting, project planning and implementation.

AHIMA Action Plan can be used for preparing to conduct a HIPAA Privacy Risk Assessment.

Privacy Law Matrix developed by the State of Washington to assist with HIPAA law preemption analysis.

Agreements, Policies, Procedures

Model Consent, Authorization and Notice of Privacy Practices provided by the American Medical Association (AMA) to assist physicians in HIPAA compliance efforts.

Sample Policies and Agreements posted by Hawaii Health Information Corporation.

Lots of HIPAA Links posted by Southern HIPAA Regional Process (SHARP)

HIPAA On The Job is an AHIMA developed policy checklist to assist you in preparing your policies to meet HIPAA compliance requirements.

HIPAA Compliance Questions for Business Partner Agreements by Michael C. Roach for AHIMA

Practice Briefs: Notice of Privacy Practices published by AHIMA, includes sample Notice of Health Information Practices and sample Notice for Alcohol/Drug Patient records.


HIPAA Basics is a Microsoft PowerPoint presentation developed by the State of Alaska, Department of Health and Social Services HIPAA Coordinators Office for HIPAA presentations to general health care audiences - Available as PDF or PowerPoint format

Covered Entity Criteria is a Microsoft PowerPoint presentation developed by the State of Washington Department of Health to assist organizations in determining HIPAA "covered entity" status - Available as PDF or PowerPoint format