Notice of Privacy Practices—Review and Redline
A close review and redline of the other side's Notice of Privacy Practices, the document that tells patients how their information is used, in the form and with the content the rule prescribes.
You get a redline, a short issues memo ranking the problems, and recommended alternative language for each one. You receive a marked-up document plus a ranked issues memo that separates what must change from what is merely preference.
Choose the version you need
- Standard$1,625
- Short Form$900
- Long Form$2,600
- Review and Redline$900This page
- Template and Playbook$2,450
Frequently asked questions
The fee covers a full read of your existing document against what your business does and current law, a tracked-changes redline you can adopt as is, and a ranked issues memo separating what must change from what is preference. It is fixed at this scope: one organization. 1 round of revisions are included. If your matter falls outside that scope we tell you before starting and quote the difference—we do not bill past a flat fee without agreeing it first.
3 to 5 business days from a complete set of instructions, plus time for the 1 round of revisions included in the fee. If you are working to a court deadline or a closing date, tell us when you order and we will confirm in writing whether we can meet it before you commit.
$900 is $325/hour × 2.75 hours—the time this deliverable takes in an ordinary hipaa matter, at the firm's standard rate. Because it is a flat fee, the risk of the work running long sits with the firm: you pay $900 whether it takes us the estimate or twice it.
1 round of revisions is included. You can add more when you order, or later, at $325 per additional round. A round is one consolidated set of your comments and our revised draft back to you.
Third-party costs are never inside a flat fee and are passed through at cost, never marked up: court and agency filing fees, court reporter and transcript charges, expert witness fees, search vendor and e-discovery hosting charges, process server fees, and travel.
What your business does, and who its users or customers are, the systems, vendors, and data flows the document has to describe accurately, any existing version, and what prompted this one, and any regulator, platform, or contract requirement you are working to. Send what you have—if something is missing we will tell you what else we need before the turnaround clock starts.
Clients also order
Other HIPAA work MC Law prepares on a flat fee.
Notice of Privacy Practices (Short Form)
A compact Notice of Privacy Practices that tells patients how their information is used, in the form and with the content the rule prescribes, sized for a lower-value or lower-risk transaction.
3 to 5 business days2 revisions
HIPAA Authorization and Release Forms
A custom-drafted HIPAA Authorization and Release Forms that obtains valid authorization for uses that fall outside treatment, payment, and operations.
3 to 5 business days2 revisions
HIPAA Authorization and Release Forms (Short Form)
A short-form HIPAA Authorization and Release Forms that obtains valid authorization for uses that fall outside treatment, payment, and operations, written for speed without leaving the important terms out.
2 business days2 revisions
HIPAA Authorization and Release Forms—Review and Redline
A close review and redline of the other side's HIPAA Authorization and Release Forms, the document that obtains valid authorization for uses that fall outside treatment, payment, and operations.
2 business days1 revision
HIPAA Business Associate Agreement (Short Form)
A short-form HIPAA Business Associate Agreement that puts the required data protection terms between a covered entity and a vendor touching protected health information, written for speed without leaving the important terms out.
3 to 5 business days2 revisions
HIPAA Business Associate Agreement—Review and Redline (Client Side)
A redline of the counterparty's HIPAA Business Associate Agreement prepared for the client, covering the document that puts the required data protection terms between a covered entity and a vendor touching protected health information.
3 to 5 business days1 revision