Yes. Most health care providers have documented HIPAA compliance programs that incorporate the administrative, technical, and physical safeguards required by HIPAA. They also include the documents and forms needed to document the CE’s communications with patients. The OCR Web site contains some sample forms and educational guidance. You will also find helpful FAQs and a variety of tips and tools.