<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://www.hipaaworks.com/</loc>
    <lastmod>2026-08-26</lastmod>
  </url>
  <url>
    <loc>https://www.hipaaworks.com/about</loc>
    <lastmod>2026-08-26</lastmod>
  </url>
  <url>
    <loc>https://www.hipaaworks.com/guides/</loc>
    <lastmod>2026-08-28</lastmod>
  </url>
  <url>
    <loc>https://www.hipaaworks.com/guides/hipaa-security-risk-analysis-small-practice</loc>
    <lastmod>2026-08-28</lastmod>
  </url>
  <url>
    <loc>https://www.hipaaworks.com/glossary/</loc>
    <lastmod>2026-08-28</lastmod>
  </url>
  <url>
    <loc>https://www.hipaaworks.com/glossary/ephi</loc>
    <lastmod>2026-08-28</lastmod>
  </url>
  <url>
    <loc>https://www.hipaaworks.com/news/</loc>
    <lastmod>2026-08-08</lastmod>
  </url>
  <url>
    <loc>https://www.hipaaworks.com/news/ocr-osf-healthcare-ransomware-risk-analysis-settlement</loc>
    <lastmod>2026-08-08</lastmod>
  </url>
  <url>
    <loc>https://www.hipaaworks.com/news/hipaa-security-rule-delayed-to-2027</loc>
    <lastmod>2026-07-23</lastmod>
  </url>
  <url>
    <loc>https://www.hipaaworks.com/news/ocr-four-ransomware-settlements-risk-analysis</loc>
    <lastmod>2026-07-22</lastmod>
  </url>
  <url>
    <loc>https://www.hipaaworks.com/news/hhs-mfa-mandate-small-practices</loc>
    <lastmod>2026-07-20</lastmod>
  </url>
  <url>
    <loc>https://www.hipaaworks.com/terms</loc>
    <lastmod>2026-08-25</lastmod>
  </url>
  <url>
    <loc>https://www.hipaaworks.com/privacy</loc>
    <lastmod>2026-08-25</lastmod>
  </url>
  <url>
    <loc>https://www.hipaaworks.com/acceptable-use</loc>
    <lastmod>2026-08-25</lastmod>
  </url>
  <url>
    <loc>https://www.hipaaworks.com/data-processing</loc>
    <lastmod>2026-08-25</lastmod>
  </url>
</urlset>
