Skip to main content
Free Download · HIPAA Security Rule · 2026

The HIPAA Compliance Checklist for Medical Practices

The exact administrative, physical, and technical safeguards OCR and cyber-insurers check — in a one-page checklist you can score your practice against in 15 minutes.

  • All 5 control areas: Administrative, Physical, Technical, Documentation, Cybersecurity
  • The Security Risk Analysis & BAA items most practices miss
  • The 5 gaps that most often fail a HIPAA audit
  • Built by a healthcare MSP — practical, not legalese
HIPAA-First Managed ITPHI Protection & EncryptionEHR & EMR Support

Get the checklist (free)

Instant PDF download. No spam — just the checklist and an optional follow-up.
By downloading you agree to be contacted by ACS about healthcare IT. Unsubscribe anytime.

You’re all set ✓

Your HIPAA Compliance Checklist is downloading. If it didn’t start, use the button below.

Download the checklist (PDF)

Most practices that download this book a free 30-minute assessment to close the gaps. Grant has time this week:

What’s inside

SAFEGUARDS

Administrative, physical & technical controls mapped to the HIPAA Security Rule (45 CFR 164).

DOCUMENTATION

BAAs, 6-year retention, breach-notification readiness, and the policies OCR asks to see.

CYBERSECURITY

MFA, EDR, immutable backups, email security — what cyber-insurers now require.

The 5 gaps that most often fail a HIPAA audit

  • No current Security Risk Analysis (or one that’s years old)
  • Missing or unsigned Business Associate Agreements
  • No MFA on email and remote access
  • Backups that are never test-restored
  • Policies that exist on paper but aren’t followed or trained

Frequently asked questions

Is this checklist really free?

Yes — it’s an instant PDF download. We’re a healthcare MSP; the checklist is how practices get to know how we work.

Who is it for?

Medical practices, clinics, dental, and behavioral-health groups — any covered entity that creates, receives, stores, or transmits PHI.

Is it legal advice?

No. It’s a practical readiness checklist based on the HIPAA Security Rule. For your specific obligations, consult qualified counsel — or book a free assessment and we’ll scope it with you.

What our clients say

5.0★★★★★Based on 10 Google reviewsView all on Google →

Explore our healthcare IT resources

Request a Quote

Fill out the form below and our team will get back to you within one business day.

Inactive

ACS Client Portal

Quickly request IT services
no login required.

All requests are verified by our team.
Platform partnerships

Inactive

Simplifying IT
for a complex world.
Platform partnerships
Free 30-min IT & HIPAA security assessment