Made to order · Launch price
HIPAA for home health agencies, written for staff who work in patients’ homes
The Agency Binder is a HIPAA program for a home health or hospice agency: a Notice of Privacy Practices with your state’s law, a risk analysis and policies built around field work, a vendor and BAA register, your state’s breach clocks, and the forms your staff hand out at the first visit. We make it to order from your agency’s details and deliver it within 7 business days.
$749 one-time through December 31, then $999. You give us agency details only, never patient information.
What’s in the Agency Binder
Ten documents, delivered as editable Word files, annotated PDFs with every citation, and print-ready copies of the forms.
Start Here: what to sign, post and hand out
Who signs each document and when, what goes on your website and the office wall, what goes in the admission packet at the first visit, and an adoption checklist in priority order.
Covered-entity determination
Medicare pays an initial claim only if it's sent electronically, unless a waiver applies. The memo works through how your claims, Notices of Admission and eligibility checks go out, and asks the one question that confirms your status.
45 CFR 160.103; 42 CFR 424.32(d)
Notice of Privacy Practices and acknowledgment
Written to the 2024 amendments, with what your state protects more strictly than HIPAA, plus a plain-language summary and the acknowledgment patients sign at the first visit.
45 CFR 164.520
The OASIS privacy notices
Which of CMS's OASIS privacy notices go in the admission packet, which patients are exempt from OASIS and don't get them, and where to download both notices in English and Spanish.
CMS Home Health Agency Center
Privacy Official and Security Official
The written designation HIPAA requires, signed by the person you name and by the administrator who names them.
45 CFR 164.530(a); 164.308(a)(2)
Vendor register and BAA template
Every vendor that handles patient information (your EMR, billing company, HHCAHPS survey vendor, staffing agencies, answering service), whether its BAA is signed, and how many days it has to tell you about a breach.
45 CFR 164.504(e)
A risk analysis built for field work
It starts from the risks an office binder leaves out: a tablet stolen from a car, visit notes left in a patient's home, personal phones used for EVV and wound photos, orders sent by text, shared logins. Each risk gets a rating and a fix in the remediation log.
45 CFR 164.308(a)(1)(ii)(A)
Policies for home visits and field staff
Home visits, family members and caregivers, calls, texts, email and fax, contracted therapists and staffing-agency workers, the clinical record and OASIS data, and the reports your staff must make by law.
45 CFR 164.530; 42 CFR Part 484
Breach procedure with your state's clocks
Every deadline counted from the day you discover a breach: HIPAA's, plus your state's own notice periods and any filing with its attorney general. A worksheet and a log come with it.
45 CFR 164.400 to 164.414
Patient forms, including your state's
Authorization, access, amendment, accounting, restriction and confidential-communication forms, a record of what family and caregivers may be told, and the forms your state adds. In Texas, for example, that includes the consent required before releasing the records of a patient 60 or older.
45 CFR 164.508 to 164.528
Built for agencies whose records leave the building
The Agency Binder is for home health and hospice agencies, and other organizations with field staff or a larger workforce, where patient information goes out every day in bags, cars, tablets and phones. A small practice with one office and a front desk needs the Complete Binder ($249) instead.
The binder covers HIPAA and doesn’t replace your agency’s licensing policy and procedure manual.
See the Complete BinderHow an order works
- Order below. Your confirmation email gives the date your binder is due.
- Fill in the intake, about 5 minutes: the agency's legal name, address and state, your staff and their roles, your Privacy Official, and the vendors that handle patient information. We never ask for patient information.
- We research your state's law from primary sources, adapt every document to your agency, and run a review round before anything goes out.
- Your binder arrives by email within 7 business days of your order, as editable Word files, annotated PDFs and print-ready forms. Changes are free for 30 days after delivery.
You can get a full refund anytime before delivery.
$749 through December 31, $999 from January 1
Buy it once, or add Always-Current, which sends revised pages when a rule your binder cites changes and reminds you each year about the risk analysis, training and vendor review. Always-Current starts 30 days after your order at $149 a year; cancel anytime and the binder is yours.
Made to order and delivered within 7 business days, with a full refund anytime before delivery.
Self-help documents, not legal advice
The Agency Binder gives you written HIPAA documents built for your agency, each citing the rule it’s written to, so you can check every one against the source. It isn’t legal advice, and no set of documents can guarantee the outcome of a state survey, an accreditation visit or an OCR investigation. We never ask for or store patient information.