Compliance Checklist for New Chiropractic Offices: What You Cannot Skip

2026-08-21

A practical compliance checklist for new chiropractic offices covering HIPAA, billing, safety, and more. Essential steps to avoid fines and legal issues.

Starting a chiropractic practice is exciting, but compliance can feel overwhelming. Missing a requirement can lead to fines, audits, or even loss of your license. This checklist covers the non-negotiables: HIPAA, billing, safety, and employment. Follow it step by step to protect your practice from day one.

1. HIPAA Compliance: Protect Patient Data

HIPAA applies to all chiropractors who transmit health information electronically. You must safeguard patient records and control access.

Privacy Officer: Designate someone (often yourself) to oversee HIPAA compliance.
Notice of Privacy Practices: Provide to every patient at first visit and post it in your office.
Business Associate Agreements (BAAs): Sign with any vendor that handles patient data, such as billing services, EHR providers, or cloud storage. Without a BAA, you are liable for their breaches.
Risk Assessment: Conduct a security risk analysis annually. Identify vulnerabilities like unlocked file cabinets or weak passwords.
Staff Training: Train all employees on HIPAA rules at hire and annually. Document the training.
Breach Response Plan: Have a written plan for reporting breaches to HHS and affected patients. Fines range from $100 to $50,000 per violation, depending on severity.

Action step this week: Download a HIPAA risk assessment template from HHS.gov and complete it. It takes about two hours.

2. OSHA and Workplace Safety

OSHA regulations apply to any practice with employees. You must provide a safe workplace and train staff on hazards.

Bloodborne Pathogens Plan: Even if you rarely see blood, you must have a written exposure control plan. Update it annually.
Hazard Communication: If you use any chemicals (e.g., cleaning supplies, disinfectants), maintain a chemical inventory and Safety Data Sheets (SDS) for each.
Emergency Action Plan: Outline procedures for fires, medical emergencies, and natural disasters. Post evacuation routes.
First Aid Kit: Stock a comprehensive kit and check it monthly.
Training: Train staff on bloodborne pathogens, hazard communication, and emergency procedures. Keep records for at least 3 years.

Action step this week: Review OSHA’s small business handbook (available free at osha.gov) and create your exposure control plan.

3. Billing and Coding Compliance

Billing errors can trigger audits and fraud accusations. You must code accurately and document thoroughly.

CPT and ICD-10 Codes: Use only codes that match your documentation. For example, chiropractic manipulation is 98940-98942; don’t use 97140 for manual therapy unless you actually perform it.
Documentation: For every visit, record the patient’s history, exam findings, diagnosis, treatment plan, and progress notes. Include time spent if billing for time-based codes.
Medicare Rules: If you accept Medicare, follow their specific requirements: only medically necessary treatment, and you must have a valid referral for some services. Know the 2019 Medicare rule that limits coverage for subluxation to 12 visits or 30 days, whichever comes first.
Coding Audits: Perform internal audits quarterly. Review 5-10 random charts for coding accuracy.
Billing Software: Use a reputable EHR with built-in coding checks. Prices range from $100-$300 per month per provider.

Action step this week: Schedule a 30-minute review of your coding with a certified chiropractic coder or billing service. They can identify common mistakes.

4. State Licensure and Scope of Practice

Each state has its own board that regulates chiropractic. You must renew your license and follow state-specific rules.

License Renewal: Check your renewal date and continuing education (CE) requirements. Most states require 12-24 CE hours per year. Fees range from $50-$200.
Scope of Practice: Know what you can and cannot do in your state. For example, some states allow chiropractors to perform acupuncture or prescribe certain supplements; others do not.
Supervision of Staff: If you hire chiropractic assistants or massage therapists, ensure they are certified and work within their scope.
Advertising Rules: Some states restrict claims like “cures” or “treats” certain conditions. Review your website and marketing materials.

Action step this week: Visit your state chiropractic board’s website and print your license renewal requirements and scope of practice rules.

5. Employment Law Compliance

If you have employees, you must follow federal and state labor laws.

I-9 Forms: Verify employment eligibility for every hire within 3 days of start.
Posters: Display required posters (minimum wage, OSHA, FMLA, etc.) in a common area. You can order a free poster set from the Department of Labor.
Payroll Taxes: Register for an EIN and state tax ID. File quarterly payroll taxes.
Workers’ Compensation: Carry workers’ comp insurance if you have employees. Premiums vary by state and payroll, but budget $500-$2,000 per year for a small office.
Employee Handbook: Create a simple handbook covering anti-harassment, leave policies, and dress code. Have an employment attorney review it.

Action step this week: If you haven’t already, register with your state’s new hire reporting program and order the federal posters.

Patient safety is both ethical and legal. You must obtain informed consent and follow safety protocols.

Informed Consent: Explain the risks and benefits of chiropractic care, including rare but serious complications like stroke. Have the patient sign a consent form. Keep it in their chart.
Screening: Before treatment, screen for red flags (e.g., cauda equina syndrome, fracture, or cancer). Document your findings.
Adjustment Techniques: Use only techniques you are trained and competent in. If you use drop tables or instruments, ensure they are maintained.
Emergency Protocol: Know what to do if a patient has an adverse reaction. Have emergency contact numbers and a plan for calling 911.

Action step this week: Review your informed consent form with a malpractice insurance carrier or attorney. Update it if needed.

7. Insurance and Liability Coverage

You need professional liability insurance to protect your assets.

Malpractice Insurance: Also called professional liability. Premiums for chiropractors range from $1,500-$5,000 per year, depending on coverage limits and claims history. Get at least $1 million per occurrence and $3 million aggregate.
General Liability: Covers slips and falls in your office. Cost is typically $300-$600 per year.
Cyber Liability: If you store patient data electronically, consider cyber insurance. It covers breach response and legal fees. Premiums start around $500 per year.
Business Owner’s Policy (BOP): Bundle general liability and property insurance. Often cheaper than buying separately.

Action step this week: Get quotes from three insurance brokers. Compare coverage and deductibles.

FAQ

Q: Do I need a HIPAA compliance officer if I’m a solo practitioner? A: Yes, but you can assign yourself as the officer. You must still conduct risk assessments and train staff, even if it’s just you.

Q: How often should I update my OSHA plan? A: At least annually, or whenever you change procedures, add new chemicals, or hire new staff. Keep a log of updates.

Q: Can I use a free EHR to stay compliant? A: Free EHRs may lack robust security features. If you use one, ensure it has encryption and you sign a BAA. Paid systems often include compliance features like audit trails.

Q: What happens if I miss a compliance deadline? A: You may face fines, license suspension, or legal action. For example, HIPAA violations can cost up to $50,000 per violation. State boards may impose probation or require additional CE.

The Bottom Line

Compliance is not optional. Start with the checklist above and tackle one area per week. Use templates from HHS, OSHA, and your state board. Document everything. If you are unsure, consult a healthcare attorney or compliance consultant. The cost of prevention is far less than the cost of a violation. Your practice’s future depends on it.