# HIPAA WordPress Guide

> URL: https://www.atlantic.net/about-us/whitepapers/hipaa-wordpress-guide/ | Updated: 2026-09-16

## Best Practice for Creating a HIPAA-Compliant WordPress Site

This whitepaper offers a comprehensive guide to securing a WordPress site for HIPAA compliance. It provides a clear framework and practical steps to support the confidentiality, integrity, and availability of protected health information (PHI) managed through your WordPress site.

## Key topics covered

- HIPAA-compliant design rules for WordPress: incorporating access controls, audit controls, integrity controls, and transmission security controls to safeguard PHI.
- Server hardening: regularly updating WordPress, PHP, and the operating system; using strong passwords; encrypting file transfers; updating file permissions; and restricting database user privileges.
- HIPAA-compliant WordPress hosting: choosing a hosting provider that implements physical security controls, offers a firewall, provides encrypted VPN and data backup plans, and supports disaster recovery.

## Download this helpful guide to:

- Understand the HIPAA compliance requirements for WordPress sites.
- Learn how to implement security measures to protect PHI on your WordPress site.
- Choose a HIPAA-compliant hosting provider for your WordPress site.