HIPAA Notice of Privacy Practices for Speech-Language Pathologists

Speech-language pathologists in private practice who bill insurance electronically are HIPAA covered entities. You need a Notice of Privacy Practices — provided to patients (or their parents/guardians) at first service, posted on your website, and displayed in your office — aligned to the HHS February 2026 model.

When does an SLP need their own NPP?

Speech-language pathologists work in many settings — hospitals, schools, outpatient rehabilitation clinics, early intervention programs, and private practice. The NPP obligation attaches to each covered entity independently.

If you:

• Operate an independent SLP private practice
• Submit your own insurance claims (medical, Medicare, Medicaid, Early Intervention) electronically
• Use a billing service that submits claims on your behalf

— your practice is its own covered entity and needs its own NPP, separate from any employing hospital, school, or rehabilitation organization.

HIPAA vs. FERPA for SLPs

SLPs often work in both school and private practice settings, which can create confusion between HIPAA and FERPA. The distinction is straightforward:

• School records for SLP services in a FERPA-covered school are governed by FERPA, not HIPAA
• Private practice records for the same patient are governed by HIPAA, not FERPA
• These are separate records held by separate entities — your private practice NPP covers only your private practice records

Distribution checklist

• Provide to each new patient (or parent/guardian for minors) at first service
• Request written acknowledgment of receipt
• Post the full NPP on your website
• Display in your office waiting area
• Update and redistribute when your privacy practices materially change

Frequently Asked Questions