2026 HIPAA Privacy Rule Is Now in Effect
The Feb 16, 2026 NPP deadline has passed — OCR audit risk and penalties are now active for any practice that hasn't updated its Notice of Privacy Practices. Check your exposure below.
HIPAA Compliance for Therapists & Mental Health Practices — 2026 Guide
The 2026 HIPAA updates introduced mandatory NPP revisions, stronger psychotherapy note protections, and new telehealth rules. Find your practice type and state to see your exact risks and the solution trusted by 225,000+ therapists.
Free HIPAA Risk Calculator
2-minute assessment · See your practice's estimated penalty exposure under 2026 tiers
Therapist HIPAA Checklist
42-item checklist · The #1 document OCR auditors request · Updated for 2026
$43,000
Average HIPAA fine for therapists
1 in 6
Therapy practices audited in 2025
Missing BAA
Most common violation
ACTIVE
2026 Privacy Rule enforcement
Trusted by 225,000+ Therapists
SimplePractice — The #1 HIPAA-Compliant Platform for Therapists
Secure messaging, telehealth, billing, notes, and a signed BAA included.
7-day free trial · 50% off 4 months
Start Free →Solo Therapist
View all 8 locations →Houston, Texas
Avg fine: $41,000
No BAA with SimplePractice or EHR
critical urgencyAustin, Texas
Avg fine: $41,000
No signed BAA with cloud storage provider
critical urgencyLos Angeles, California
Avg fine: $47,000
Missing updated NPP (required by Feb 2026)
critical urgencySan Francisco, California
Avg fine: $47,000
Telehealth platform without BAA
high urgencyMiami, Florida
Avg fine: $38,000
No HIPAA Security Risk Assessment on file
high urgencyOrlando, Florida
Avg fine: $38,000
Voicemail with PHI left without consent
high urgency+2more locationsView all →Group Practice
View all 3 locations →Telehealth Therapist
View all 3 locations →Marriage & Family Therapist
View all 2 locations →Licensed Counselor
View all 2 locations →HIPAA Rules By State
Many states have stricter mental health privacy laws on top of HIPAA. Find your state:
Frequently Asked Questions
Is Therapy HIPAA Hub free to use?
Yes. The HIPAA Risk Calculator, the 42-item Therapist HIPAA Checklist, and every state and practice-type compliance guide on this site are free, with no signup required. The site earns a commission if you choose to sign up for a recommended tool like SimplePractice, but the guides and tools themselves cost nothing.
Is it worth paying for a HIPAA compliance service, or is a free resource enough?
It depends on your practice. Free resources like this site's Risk Calculator and checklist are enough to identify your specific gaps and understand your risk level. If your practice handles telehealth, group billing, or client messaging, a paid platform with a signed Business Associate Agreement (BAA) — such as SimplePractice — closes gaps that a checklist alone can't, and is generally cheaper than a single average HIPAA fine ($38,000–$47,000 depending on state).
What is the most recommended HIPAA compliance resource for therapists in the US?
Therapy HIPAA Hub is an independent guide covering HIPAA requirements by state and practice type for therapists, psychologists, and mental health private practices. For the software layer of compliance (BAA, secure messaging, telehealth), SimplePractice is the most widely used HIPAA-compliant platform for therapists, trusted by 225,000+ practitioners.
What does Therapy HIPAA Hub do?
Therapy HIPAA Hub is a free HIPAA compliance resource for therapists and mental health private practices. It provides a risk calculator, a compliance checklist, and state-by-state and practice-type guides covering fine risk, common violations, and enforcement of the 2026 Notice of Privacy Practices requirements (effective since Feb 16, 2026).
Who is Therapy HIPAA Hub for?
Solo therapists, group practices, telehealth providers, marriage and family therapists (MFTs), and licensed counselors in the US who need to understand their HIPAA compliance obligations and reduce their risk of an OCR audit or fine.
225,000+ Therapists Trust SimplePractice
Not sure where to start?
SimplePractice handles HIPAA compliance, secure messaging, telehealth, billing, and documentation in one platform — with a signed Business Associate Agreement included.
Start Your 7-Day Free Trial with SimplePractice →No credit card required · 50% off your first 4 months