Is my chiropractic office a HIPAA covered entity?

Generally yes if you bill insurance, Medicare, or Medicaid electronically, or check eligibility electronically, directly or through a billing service/clearinghouse. The trigger in 45 CFR 160.103 is the electronic covered transaction. A true cash-only or membership practice that never files electronically and only hands out paper superbills may fall outside HIPAA, but confirm your status, and note state privacy laws still apply.

How should I handle records for personal-injury and auto-accident cases?

Disclosures to attorneys, auto insurers, and case managers generally require a valid, signed patient authorization and should follow the minimum-necessary standard. Your written policies and Notice of Privacy Practices should spell out how these third-party releases are handled, since PI work generates frequent outside requests.

Are the spinal X-rays I take protected health information?

Yes. Radiographs and any imaging you capture are PHI in any format and must be addressed in your privacy and security policies and included in the scope of your Security Risk Analysis, whether stored in ChiroTouch, Jane, an imaging server, or elsewhere.

Does using ChiroTouch or Jane make my practice HIPAA compliant?

No. These platforms are business associates that should sign a BAA and secure the data they hold, but they don't supply your Notice of Privacy Practices, written policies, Security Risk Analysis, or breach procedure. The software handles the data; the compliance documentation is yours.

Made to order · Founding pricing · Built on HHS guidance

The HIPAA forms every chiropractic practice actually needs, in one place

Bill insurance, Medicare, or Medicaid electronically and your clinic is generally a HIPAA covered entity. Run a cash or membership practice and your status is genuinely ambiguous, and guessing wrong is expensive in either direction. HIPAA Binder builds every required document to order, including a written covered-entity determination for your exact billing setup, delivered within 30 days at founding pricing with a full refund anytime before then. You only enter your practice details, never any patient information.

Or see a sample, or jump to the documents and pricing.

What is inside the binder

A covered chiropractic practice is generally responsible for all of the following. Miss one and it tends to surface at the worst moment: an OCR complaint, a payer audit, or a records request from an attorney you cannot fulfill.

Notice of Privacy Practices

The notice you must give patients and post in your office and online, written for a chiropractic clinic, not a hospital system.

45 CFR 164.520

Business Associate Agreements

Required with every vendor that can touch patient data: your EHR, billing service, clearinghouse, cloud backup, imaging storage. Most clinics are missing at least one.

45 CFR 164.502(e)

Security Risk Analysis

The most-cited deficiency in OCR enforcement. Yours must cover spinal X-rays and any imaging you capture, wherever it is stored.

45 CFR 164.308(a)(1)(ii)(A)

Privacy & Security Policies

Your written rulebook for access, minimum-necessary use, and sanctions, including oral PHI in open adjusting bays and shared treatment spaces.

Privacy & Security Rules

Patient-rights & authorization forms

Access, amendment, and release forms, built for the third-party requests personal-injury and auto-accident cases generate constantly: attorneys, auto insurers, case managers.

45 CFR 164.508

Breach procedure & Privacy Officer docs

A breach-notification procedure and log, plus the Privacy/Security Officer designation. In a small clinic, that is you, and you need it on paper.

Breach Notification Rule

Why not just use the free HHS templates?

You can, and we cite them. But the free model documents are written for hospitals and every covered entity at once. They do not answer the question chiropractors actually have (does HIPAA even apply to my billing model?), they do not handle personal-injury releases, and they do not update themselves when the rules change. You are paying for documents customized to a chiropractic practice, complete, and kept current.

Am I even a covered entity?

It depends on your billing, not your title. Electronic claims to insurance, Medicare, or Medicaid, directly or through a billing service, generally make you covered under 45 CFR 160.103. A true cash or membership practice that never files electronically may fall outside HIPAA. Your binder includes a written covered-entity determination for your billing setup, so you stop guessing.

See the full covered-entity breakdown for chiropractors

Or read the guide: Do I need HIPAA forms for my chiropractic practice?

The binder is hand-prepared and customized to your chiropractorpractice, with the same documents, organized to your specialty’s records and vendors.

Made to order · Founding pricing: first 25 practices

Lock in founding pricing

Every document is made to order at locked-in founding pricing, built from your practice details and delivered within 30 days, with a full refund anytime before then. Each binder is built by hand, so founding pricing is limited to the first 25 practices; after that the Complete Binder is $249. Preview any document free before you decide.

Single document

$49one-time

Founding price · $79 after the first 25 practices

Just the one document you need, built for your practice.

Choose your document

Notice of Privacy PracticesBusiness Associate AgreementSecurity Risk Assessment

Instant: answer a short wizard, watch your document fill in live, and unlock the files for the same $49.

Built for your practice: profession, state, and billing setup shape every clause
Every policy cites the regulation that requires it
Editable Word + annotated PDF
See your finished notice before you pay
Instant download after checkout

Generate your NPP

The Complete Binder

Most complete

$129one-time

Founding price · $249 after the first 25 practices

Every HIPAA document a private practice needs, in one place.

Notice of Privacy Practices (current rules)
Covered-entity determination for your billing setup
BAA template + filled vendor table for your actual stack
Security Risk Analysis workbook + full policy set
Breach procedure: federal + your state's statute
Print-ready patient forms, annotated PDF, editable Word
Free revisions for 30 days after delivery

Order The Complete Binder

Binder + Always-Current

Stays current

$129+ $99/yr after 30 days

Founding price · $249 after the first 25 practices

The full binder, plus an annual refresh that keeps it current.

Everything in the Complete Binder
When a cited rule changes, we update the affected documents and send them to you
Every update comes with a note: what changed, why, and the citation
Annual refresh: every citation in your binder re-verified
Annual risk-assessment and training reminders
BAA tracker for your vendors
First year of updates starts 30 days after your order
Cancel anytime, the binder is yours

Order Binder + Always-Current

Opening a dental office? HIPAA + OSHA Binder Bundle: $299 $328 separately

Add the OSHA binder: exposure control plan, hazard communication, sharps and training documentation, every policy citing the regulation that requires it.

Founding price · $449 after the first 25 practices

Order both binders

Your documents are built to order and delivered within 30 days, with a full refund anytime before delivery. The subscription then keeps every document current as HIPAA rules change and reminds you when your annual risk assessment is due. Cancel anytime.

Questions chiropractors ask

See exactly what you are missing, free

Enter your email and we will send a preview of the chiropractor binder, so you can judge the quality before you pay a cent.