Free HIPAA reference template · v1.0 · Applies to covered entities & business associates
Free, no signup needed. A ready-to-fill spreadsheet (.xlsx) with dropdowns and examples.
Adopting this document means committing to these HIPAA controls, the 45 CFR §164 requirements it helps satisfy, by area:
Template (spreadsheet). The confidential log of disciplinary actions applied for security/privacy policy violations: evidence that your Sanction Policy is enforced, not just written. Keep it access-restricted (HR / the Privacy Official) and reference individuals by ID where possible.
The confidential record that your sanction policy has teeth (each violation, the outcome, and the action applied), the proof an auditor looks for that consequences are real.
One row per case (confidential):
Restrict this file to HR and the Privacy/Security Official. Log each substantiated violation and the sanction applied, referencing people by workforce ID rather than name where you can. Satisfies the sanction requirement at 45 CFR § 164.308(a)(1)(ii)(C) and § 164.530(e).
See where your organization stands on the controls this template cites.
Join Us