Healthcare & HIPAA

Free HIPAA Privacy Policy Generator

Create a HIPAA notice of privacy practices with patient rights, contact routes and current disclosure provisions. Edit examples and export HTML, Word or PDF.

  • No signup
  • Browser-based generation
  • HTML & Word downloads
  • Print or save PDF
Make it yours

Create your HIPAA Privacy Policy

Fields marked * are required. Open a section to begin; close it to bring the next section into view.

From information to a useful document

How to create your hipaa privacy policy

Confirm whether you are a covered provider or health plan, the entities covered, privacy contact, request routes, optional activities and stricter state or other rules.

  1. 01

    Gather accurate information

    Identify the responsible organisation, scope and actual contact routes. USA is an editable example country. HIPAA tools address US obligations; a location field does not establish whether a law applies.

  2. 02

    Tailor examples and findings

    Open each section. Keep suitable model wording or edit it, and use Restore example when needed. Actual parties, clinical explanations, controls and findings are not invented. Closing a section brings the next into view while keeping answers.

  3. 03

    Review and export

    Read the complete document and verify required details. Download Word or HTML, or open Print / Save PDF for a fixed copy. The preview, formatted copy and exports include a link to this exact tool.

  4. 04

    Publish and maintain

    Publish the approved policy or notice where its audience can access it, provide any required copies and communicate material changes. Keep contacts and procedures aligned with actual operations.

Purpose-specific content

What your document covers

Covered entity and notice scope → ordinary uses → choices and authorisations → patient rights → Part 2 protections → complaints and notice changes.

Conditional questions follow the selected purpose or activity. Sample procedures stay editable. Patient records, identifiable student cases and credentials should remain in the organisation’s approved systems.

Before use

Scope, privacy and review

This patient-facing notice is for HIPAA covered providers or health plans. It is not a complete internal compliance manual or a standalone Part 2 program notice. Review current HHS models and any more protective state or other law.

  • Generation takes place in this browser. Form answers are not sent to a document-generation service or saved between visits. Download before leaving.
  • Enter organisation-level details and relevant evidence summaries. Keep patient-identifying records and sensitive supporting evidence in approved organisational systems.
  • Check applicable requirements, operational capacity and authority before use. Model wording does not verify facts, implement safeguards or confer legal compliance.
Template maintenance

Substantive update: 9 October 2026. No certification or review by a named legal professional is claimed.

Common questions

Frequently asked questions

Is this tool free, and do I need an account?

Creating, copying and exporting your document is free and requires no account. Form answers are processed in this browser and are not saved between visits.

Does this create an internal HIPAA compliance programme?

No. It creates a patient-facing notice of privacy practices. Internal policies, workforce training, security risk analysis, contracts and implemented controls remain separate responsibilities. Standalone Part 2 programs need the appropriate Part 2 notice.

Can I keep or edit the sample content?

Yes. Fields marked “Editable example” contain model wording with Restore example controls. USA is an editable sample country, not a determination of applicable law. Keep wording only when it matches the actual situation. Enter actual parties, contacts, clinical information supplied by a professional or assessment evidence as appropriate; do not enter patient records, student case details or credentials.

Which export formats are available?

Download HTML or an editable Word .docx document. For PDF, open Print / Save PDF and choose Save as PDF in the browser print dialog. Preview, formatted copy and exports contain a link to this exact tool. Publish policies where appropriate; share consent, contract and assessment documents privately with intended recipients.

Reference for your review

HHS: updated model notices of privacy practices. Check the rules applicable to the organisation, records and activity; reference links do not establish applicability or certification.

HHS: separate Part 2 patient notice for organisations needing that form.