Run HIPAA Privacy Walk-Through — Free

Visible PHI and Public Exposure

No visible PHI on desks, counters, or monitors in public view critical (required)

Check for charts, labels, schedules, screens, or documents containing PHI visible from hallways, waiting areas, or visitor paths.

Yes No N/A

Patient names or identifiers are not displayed in unsecured locations critical (required)

Verify whiteboards, sign-in sheets, appointment lists, and call-out boards do not expose PHI beyond the minimum necessary.

Yes No N/A

Computer screens are positioned to prevent shoulder surfing

Confirm monitors are angled away from public traffic and privacy filters are used where needed.

Yes No N/A

Paper records are stored face-down or otherwise shielded when unattended

Check whether charts, requisitions, and printed reports are protected from casual viewing.

Yes No N/A

Workstation Security

Workstations are locked or logged off when unattended critical (required)

Observe whether staff use screen locks, logoff procedures, or proximity controls when stepping away.

Yes No N/A

Access to PHI is limited to authorized personnel only

Verify shared work areas, terminals, and paper files are not accessible to visitors or unauthorized staff.

Yes No N/A

Printed PHI is collected promptly from printers and copiers

Check for abandoned printouts, misdirected documents, or stacked reports left in output trays.

Yes No N/A

Fax, Print, and Document Handling

Incoming faxes are received in a secure location critical (required)

Confirm fax machines or electronic fax systems are placed so incoming PHI cannot be viewed by unauthorized persons.

Yes No N/A

Fax cover sheets and recipient verification are used before transmission

Verify staff confirm recipient number and use appropriate cover sheets or secure fax procedures for PHI.

Yes No N/A

Misrouted or misprinted documents are handled as privacy incidents

Check whether staff know how to escalate, document, and correct fax or print errors involving PHI.

Yes No N/A

Shred Bin and Disposal Controls

Shred bins are labeled and placed in secure locations critical (required)

Confirm shredding containers are clearly identified and not accessible to the public or unauthorized staff.

Yes No N/A

PHI is placed in shred bins rather than regular trash

Observe whether staff dispose of paper records, labels, and notes containing PHI in approved destruction containers.

Yes No N/A

Conversation Privacy and Sound Control

PHI conversations are not audible in waiting or public areas critical (required)

Listen for discussions at reception, in hallways, and near exam rooms that could disclose patient information.

Yes No N/A

Staff use lowered voices or private spaces for sensitive discussions

Verify staff move conversations containing PHI to enclosed rooms or otherwise reduce the risk of being overheard.

Yes No N/A

Get your results

Enter your email — we'll send you a PDF of your filled-out template. We won't sign you up to anything; you can opt in to the trial from the email if you want.

Email (required)

Your name (optional)

Run: HIPAA Privacy Walk-Through

Visible PHI and Public Exposure

Workstation Security

Fax, Print, and Document Handling

Shred Bin and Disposal Controls

Conversation Privacy and Sound Control

Get your results