Eaglizer ITHIPAA for acupuncture practices
Many acupuncturists are not sure whether HIPAA applies to them. The answer turns on one question about billing, and even when it does not apply, the patient information you hold deserves the same protection.
Free preview before you pay. Editable Word files. 14 day refund.
Does HIPAA apply to your practice?
HIPAA applies to a health care provider that sends health information electronically in connection with a standard transaction, such as an insurance claim or an eligibility check, either directly or through a billing service or clearinghouse. If you bill insurance electronically, you are a covered entity.
A cash only practice that gives patients a superbill to submit themselves is generally not a covered entity on that basis alone. State privacy laws may still apply, and many cash practices adopt HIPAA level policies anyway because insurers, referral partners, and patients expect them. Confirm your status with counsel.
Where acupuncture practices differ
- Starting to bill insurance. Once you or your billing service submit claims electronically, HIPAA applies to all of the patient information the practice holds, not just insured patients.
- Community and open treatment rooms. Some incidental disclosure is allowed, but set reasonable safeguards for intake conversations and anything written where others can see it.
- Herbal pharmacies. Sharing a formula with a pharmacy that fills it for the patient is part of treatment. Online dispensaries and practice software that store patient records for you need business associate agreements.
- Booking and reminder tools. Scheduling, texting, and online intake platforms that hold health details need agreements.
What the kit writes for an acupuncture practice
In the questionnaire, choose Other health care practice. The kit writes a full set of privacy and security policies, a privacy notice, a breach procedure, and a business associate agreement for your vendors, with your details throughout.
Questions
Do acupuncturists have to follow HIPAA?
Those who bill insurance electronically, directly or through a billing service, are covered entities and must. Cash only practices generally are not, but state privacy law can still apply.
Does giving a patient a superbill make us covered by HIPAA?
Not by itself. Covered entity status comes from the practice, or someone acting for it, sending a standard transaction electronically. Confirm your situation with counsel.
Full HIPAA Policy Kit, $129
- Notice of Privacy Practices, updated for the 2026 rules, plus the acknowledgment form
- 22 Privacy policies and procedures
- 19 Security policies mapped to the Security Rule
- Breach Notification policy with a risk assessment form and log
- Business Associate Agreement for your vendors
- Workforce confidentiality agreement, training log, and access checklist
- Security Risk Analysis worksheet, pre filled from your answers
- Patient request forms, plus a California addendum for California practices
More guides
- HIPAA compliance for dental offices: what auditors actually check
- HIPAA compliance checklist for small medical practices in California
- The HIPAA security risk assessment, explained for small practices
- Notice of Privacy Practices template, updated for 2026
- HIPAA policies for chiropractic offices
- HIPAA policies for physical therapy practices
- HIPAA policies for mental health and behavioral health practices
- HIPAA policies for optometry practices
- HIPAA for med spas and aesthetics practices
- HIPAA policies and procedures for small medical practices
- HIPAA business associate agreement: what it must include
- HIPAA compliance checklist for small practices, 2026
- HIPAA breach notification deadline calculator
- Free HIPAA policy templates: where to get them, and what they leave out
- HIPAA training requirements for small practices
- HIPAA policies for podiatry practices
- HIPAA policies for dermatology practices
- HIPAA policies for pediatric practices
- HIPAA policies for speech therapy practices
Templates, not legal advice. Eaglizer IT is not a law firm and does not certify HIPAA compliance. Using templates does not by itself make a practice compliant; follow the policies, train your staff, and keep records.