Eaglizer ITHIPAA policies for speech therapy practices
Private speech therapy practices sit between health care and education. Many clients are children, many referrals come from schools, and a growing share of sessions happen by video.
Free preview before you pay. Editable Word files. 14 day refund.
Where speech therapy practices differ
- Teletherapy. The video platform, and any tool that stores recordings or session notes, must sign a business associate agreement.
- Session recordings. Audio and video recordings used to track progress are part of the client's health information. Decide where they are stored, who can view them, and when they are deleted.
- Parents of minor clients. Parents are generally the personal representative for a child, subject to the exceptions state law allows.
- School records. Records held by a school are usually education records under FERPA, not HIPAA. Once a school evaluation or IEP comes into your private practice record, treat your copy as protected health information under your own policies.
- Talking with teachers. Discussing a child's therapy with a teacher is a disclosure outside treatment. Get a parent's written authorization first.
What the kit writes for a speech therapy practice
In the questionnaire, choose Other health care practice, and answer yes to telehealth if you offer teletherapy, so the platform and remote session safeguards are added throughout.
Questions
Are speech therapists covered by HIPAA?
A private practice that bills insurance electronically is a covered entity. Therapists employed by a school usually work under FERPA instead.
Can I record therapy sessions?
HIPAA does not prohibit it, but recordings are protected information. Tell families, get consent where state law requires it, store recordings securely, and delete them on a schedule.
Full HIPAA Policy Kit, $129
- Notice of Privacy Practices, updated for the 2026 rules, plus the acknowledgment form
- 22 Privacy policies and procedures
- 19 Security policies mapped to the Security Rule
- Breach Notification policy with a risk assessment form and log
- Business Associate Agreement for your vendors
- Workforce confidentiality agreement, training log, and access checklist
- Security Risk Analysis worksheet, pre filled from your answers
- Patient request forms, plus a California addendum for California practices
More guides
- HIPAA compliance for dental offices: what auditors actually check
- HIPAA compliance checklist for small medical practices in California
- The HIPAA security risk assessment, explained for small practices
- Notice of Privacy Practices template, updated for 2026
- HIPAA policies for chiropractic offices
- HIPAA policies for physical therapy practices
- HIPAA policies for mental health and behavioral health practices
- HIPAA policies for optometry practices
- HIPAA for med spas and aesthetics practices
- HIPAA policies and procedures for small medical practices
- HIPAA business associate agreement: what it must include
- HIPAA compliance checklist for small practices, 2026
- HIPAA breach notification deadline calculator
- Free HIPAA policy templates: where to get them, and what they leave out
- HIPAA training requirements for small practices
- HIPAA policies for podiatry practices
- HIPAA policies for dermatology practices
- HIPAA policies for pediatric practices
- HIPAA for acupuncture practices
Templates, not legal advice. Eaglizer IT is not a law firm and does not certify HIPAA compliance. Using templates does not by itself make a practice compliant; follow the policies, train your staff, and keep records.