United States
HIPAA compliance, made simple
The US Health Insurance Portability and Accountability Act sets the rules for protecting patient health information, applying to healthcare providers, insurers, and the vendors that process health data on their behalf.
ComplianceDesk gives you 25 pre-built HIPAA controls, an evidence vault, audit-ready reports, and reminders before anything falls overdue — so proving HIPAA compliance stops being a spreadsheet exercise.
Every HIPAA control, organised for you
The real control library ComplianceDesk seeds the moment you activate HIPAA — 25 controls across 6 categories.
Privacy Rule
- HIPAA-1.1 Notice of Privacy Practices provided
- HIPAA-1.2 Minimum necessary standard applied
- HIPAA-1.3 Patient access and amendment rights process
- HIPAA-1.4 Accounting of disclosures process
- HIPAA-1.5 Privacy complaint process
Administrative Safeguards
- HIPAA-2.1 Security risk analysis performed
- HIPAA-2.2 Security official designated
- HIPAA-2.3 Workforce training and sanction policy
- HIPAA-2.4 Contingency plan in place
- HIPAA-2.5 Information access management authorization procedures
- HIPAA-2.6 Security incident identification and response procedures
- HIPAA-2.7 Periodic technical and non-technical evaluation
- HIPAA-2.8 Workforce security procedures implemented
Physical Safeguards
- HIPAA-3.1 Facility access controls
- HIPAA-3.2 Workstation use and security policy
- HIPAA-3.3 Device and media disposal/reuse controls
Technical Safeguards
- HIPAA-4.1 Unique user identification and access control
- HIPAA-4.2 Audit controls implemented
- HIPAA-4.3 Integrity controls for ePHI
- HIPAA-4.4 Transmission security
- HIPAA-4.5 Emergency access procedure for ePHI
- HIPAA-4.6 Person or entity authentication verified
Organizational Requirements
- HIPAA-5.1 Business Associate Agreements in place
Breach Notification Rule
- HIPAA-6.1 Breach risk assessment procedure
- HIPAA-6.2 Individual and HHS notification within required timelines
Frequently asked questions
How many controls does ComplianceDesk track for HIPAA?
25, organised into 6 categories, ready to assign to an owner as soon as you activate the framework.
Can I track HIPAA alongside other frameworks?
Yes — most teams activate several frameworks at once. Controls that overlap across frameworks can share the same evidence, so you don't collect the same document twice.
How long does it take to set up HIPAA in ComplianceDesk?
Activating HIPAA instantly seeds its full control library. Most teams assign owners and get their first controls moving within a day.
Related guides
Other United States frameworks
See your full compliance picture
131 frameworks, one system of record.