Is your practice HIPAA compliant?

A 9-question gap check for small healthcare practices. Check every box your practice has in place — gaps are highlighted automatically.

2 min to complete

9 key compliance areas

Free self-assessment

Check each item your practice has in place

Check each item your practice has in place — your recommended plan and gap summary update automatically as you go.

0 / 9

Policies & documentation

Written HIPAA Privacy Policy, reviewed in the last 12 months

Covers how you use and disclose patient health information

High risk

Breach Notification Policy — we know who to notify and when

Patients, HHS, and sometimes media — timelines are strict

Medium risk

Training

All staff have received HIPAA training in the last 12 months

Documentation is required — verbal training alone is not enough

High risk

New hires receive HIPAA training before accessing patient information

Medium risk

Vendors & business associates

Signed BAA with every vendor that handles patient data

EHR, billing, cloud storage, transcription, scheduling software

High risk

We maintain a list of all vendors who access, store, or transmit PHI

Medium risk

Incident readiness

We have a process for logging and investigating potential incidents

Even non-reportable incidents must be documented

High risk

Staff know who to report a potential breach to — and what to do

Medium risk

AI & emerging tools

Any AI tools we use are HIPAA-compliant and have a signed BAA

AI scribes, scheduling bots, documentation tools, chatbots

Medium risk

Check the items above to see your compliance snapshot and recommended plan.

Why this matters for small practices

OCR enforcement is increasing

Small practices are no longer overlooked. The Office for Civil Rights has significantly expanded audit activity targeting practices with fewer than 10 providers.

Missing documentation is the most cited violation

Failure to maintain written policies, training records, and vendor agreements is consistently among the most common reasons OCR issues financial penalties — across practices of every size.

Flat fees, no hourly billing

Lookout Privacy offers flat annual plans starting at $2,500 — so you know exactly what you're paying and can budget for compliance like any other practice expense.

Built for practices without a compliance team

You're the provider and the compliance officer. Lookout Privacy is designed for practices where one person wears all the hats — including privacy officer.

Our service plans

All plans are flat annual fees. No hourly billing. Ever.

Essentials

Your foundation

$2,500 / yr · ~$208/mo

Core HIPAA policy library
Annual staff training (up to 10)
BAA templates & checklist
Vendor inventory guidance
Incident log & decision tree