HIPAA Compliance Checklist

Last updated July 6, 2026.

HIPAA changes for 2026 will have a significant impact on covered entities. With a mandatory Notice of Privacy Practices (NPP) update due by February 16, 2026, and significant modernizations to the Security Rule on the horizon, ensuring your organization is prepared is more critical than ever. 

You can use this checklist to assess your readiness for these new, more stringent requirements. Download our HIPAA Compliance Checklist for a comprehensive guide to ensure your organization meets HIPAA compliance requirements.

HIPAA Compliance Checklist PDF overview:

1. Audits and Assessments: Conduct six annual audits, identify gaps, and designate a HIPAA Compliance Officer.
2. Remediation Plans: Create and review a remediation plan annually.
3. Training: Ensure all staff undergo annual HIPAA training and document it.
4. Incident Response: Have a process for managing security incidents and breaches.
5. Policies and Procedures: Develop, review, and ensure staff understand HIPAA-related policies.
6. Vendors and Business Associates: Establish agreements and perform due diligence on business associates.

Don’t forget the importance of a Compliance Gap Review, which includes a comprehensive analysis of your organization’s technology and cybersecurity environment, a review of potential cybersecurity gaps and IT compliance risks, and a customized plan with actionable steps to mitigate risks and protect client data