Open your practice protected from day one.
Secure email, computers and Wi-Fi, trained staff and a complete HIPAA binder — set up before your first patient walks in. You focus on medicine. We handle the paperwork and the tech.
HIPAA Startup Binder
- HIPAA policies & proceduresDONE
- Privacy & Security Officer namedDONE
- Staff trained, certificates on fileDONE
- Business Associate Agreements trackedDONE
- Breach response planDONE
- Patient privacy forms readyDONE
minimum fine per violation in 2026, depending on the tier — from "didn't know" up to willful neglect not fixed within 30 days.
of OCR's financial penalties in 2022 went to small medical practices. Size is not an exemption.
HHS has proposed making both mandatory for every practice, regardless of size. We set them up from day one.
Sources: HHS 2026 inflation adjustment (45 CFR 102.3); Physicians Practice, March 2026; HHS proposed HIPAA Security Rule update, January 2025.
Most new offices open with gaps like these
None of them feel urgent on opening week. Each one is exactly what an auditor — or a hacker — looks for first. We close them before your first patient.
Choose the level of help you need
Both start the same way: a planning call, a clear setup plan and a fixed price. Done for You also brings your trained staff and complete HIPAA binder.
Consulting
Your team does the setup. We make sure it's right.
Best for: practices with an IT person or a tech-confident office manager.
- Clear plan and step-by-step setup instructions
- Product recommendations for email, devices and Wi-Fi
- Technical setup done by your team or IT person
- Final review of your setup with WCH
Done for You
Our technician does everything. You get the keys.
Best for: busy owners opening soon, with no IT person on staff.
Everything in Consulting, plus:
- Professional email on your domain with two-factor login
- Computers secured: antivirus, encryption, updates, firewall, screen lock
- Secure staff Wi-Fi and a separate guest network
- Automatic backups, tested before handoff
- Staff HIPAA training video + certificates
- Complete HIPAA Startup Binder
- Your passwords and a finished, documented setup
Not sure which fits? Take the 2-minute readiness check — we'll recommend one.
Three layers of protection, one project
Secure technology setup
- Professional email on your own domain, with two-factor login
- Computers secured: antivirus, encryption, automatic updates, firewall and screen locks
- Secure staff Wi-Fi and a separate guest network for patients
- Automatic backups, tested before handoff
Staff HIPAA training
- On-demand video: privacy, patient rights, phishing, passwords, reporting a problem
- Certificate of completion for every staff member
- A training record you keep on file
HIPAA Startup Binder
- Written HIPAA policies and procedures for your practice
- Privacy and Security Officer designation and role descriptions
- Staff confidentiality agreements and ready-to-use patient forms
- Incident report and breach response steps
- BAA tracking, user access list, backup and emergency contacts
How ready is your practice?
Six yes-or-no questions. See your score instantly, then get a personal gap report with what to fix first.
Answer all six questions to see your result.
- 1
Does every staff member log in to work email with two-factor authentication?
- 2
Are all practice computers encrypted and set to lock automatically?
- 3
Do patients use a guest Wi-Fi that is separate from your staff network?
- 4
Has every staff member completed HIPAA training — and can you prove it?
- 5
Do you have a signed Business Associate Agreement with every vendor that touches patient data?
- 6
Do you have written HIPAA policies and a named Privacy and Security Officer?
Four steps to a protected practice
Timeline: planned around your opening date
- 1
Planning call
We learn about your office, staff, systems and opening date.
You get: a setup plan and a fixed price
- 2
Setup
We set up your technology, or guide your IT person through it.
You get: secure email, devices, Wi-Fi and backups
- 3
Training
Your staff watch the training video on their own time.
You get: a certificate for every team member
- 4
Handoff
We walk you through your binder and what to keep doing.
You get: your binder, passwords and setup record
Proof you did it right
HIPAA asks for more than good intentions — it asks for written records. If an auditor, a payer or a patient ever asks, you open one binder.
Table of contents
- 01Policies & procedures
- 02Privacy & Security Officer
- 03Staff confidentiality agreements
- 04Patient forms & privacy notice
- 05Incident & breach response
- 06Vendors & BAA tracker
- 07User access list
- 08Backup & emergency contacts
HIPAA Privacy & Security Training
For every staff member · dated and kept on file
- Email · 2-factor loginOn
- Disk encryptionOn
- Guest Wi-Fi separatedYes
- Backup restore testPassed
From first application to first payment
We already credential and bill for independent practices. Adding HIPAA and your tech setup means one team, one point of contact and one less vendor to chase while you open.
See the full Turn-Key Launch for new practicesProvider Credentialing
Get in-network with payers
HIPAA & tech setup
Open protected
Medical Billing
Get paid for every visit
Questions practice owners ask us
It depends on the size of your office and the option you choose. On the planning call we build the schedule around your opening date.
Opening soon? Let's make it safe.
Tell us about your office. On the planning call we map your setup, recommend Consulting or Done for You, and give you a fixed price and timeline.
- Reply within one business day
- Fixed price before any work starts
HIPAA Compliance Support is compliance and technology support, not legal advice.