HIPAA Notice of Privacy Practices review
HIPAA Notice of Privacy Practices under 45 C.F.R. § 164.520.
Review your document — free → See a sample report- 8 document-specific checks
- + 113 general checks
- Nothing uploaded
- Free forever (MIT)
What it checks
Header statement — 45 C.F.R. § 164.520(b)(1)(i)
NPP must include the prominent header statement: 'THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.'
Critical · PRV-007
Uses and disclosures — TPO + required + permitted + authorization
NPP must describe uses and disclosures for treatment, payment, and health-care operations (TPO), plus required, permitted, and authorization-based disclosures.
Critical · PRV-008
Individual rights enumeration — § 164.520(b)(1)(iv)
NPP must enumerate individual rights: access, amendment, accounting, restriction, confidential communications, paper copy, breach notification.
Critical · PRV-009
Covered entity duties statement
NPP must describe the covered entity's duties (maintain privacy, provide notice, abide by current notice).
Critical · PRV-010
Right to complain — HHS / OCR + no retaliation
NPP must inform individuals of the right to complain to the covered entity and to HHS, and that the entity will not retaliate.
Critical · PRV-011
Effective date of notice
NPP must include an effective date.
Critical · PRV-012
Contact information for privacy questions
NPP must provide contact information for privacy questions.
Critical · PRV-013
Specific high-sensitivity disclosure provisions (substance use / mental health / HIV / genetic)
NPP should address specific protections that may apply to substance use, mental health, HIV, or genetic information.
Warning · PRV-014
Every run also applies 113 general checks that belong to any agreement: structure, parties and signatures, defined terms, cross-references, dates, amounts, and one-sided terms.
How it works
- Open vaulytica.com — no account, nothing to install.
- Drop your PDF or DOCX, or paste the text. The document type is detected and only the checks that belong to it run, inside your browser tab.
- Get a Word report in which every finding quotes the clause and cites the rule and source behind it — one of 1,946 checks across 286 document types.
More healthcare documents
- Business Associate Agreement (HIPAA)
- BAA — Business Associate to Subcontractor (HIPAA)
- Clinical Trial Agreement
- Data Use Agreement for a Limited Data Set (HIPAA)
- Informed Consent (Research / Clinical)
- Management Services Agreement (Medical or Dental Practice)
- Medical Director Agreement
- Notice of Privacy Practices Acknowledgment
- Payer / Provider Participation Agreement
- Patient Authorization for Release of PHI
- Physician Employment Agreement
- Telehealth Informed Consent