HIPAA or HIPPA? The Correct Spelling (and Why It Matters)

The correct spelling is HIPAA: the Health Insurance Portability and Accountability Act, with one P and two A's. HIPPA, with the double P, is a typo. Congress passed the law as Public Law 104-191 in August 1996, and no federal rule, HHS guidance, or enforcement action has spelled it any other way since.

You saw the double A and second-guessed yourself. So does nearly everyone else: around 4,400 people a month type "hippa or hipaa" into Google to settle the same doubt (keyword data, July 2026). Nurses, billers, and office managers who've worked under this law for years still trip on it.

The good news: once you know why the acronym looks the way it does, you can't unsee it.

Which spelling is correct: HIPAA or HIPPA?

HIPAA is the only correct spelling. It stands for the Health Insurance Portability and Accountability Act, signed into law on August 21, 1996, as Public Law 104-191. The acronym takes one letter from each word of the title, which produces a single P (Portability) and two A's (Accountability Act). HIPPA is a misspelling with no legal meaning: no law, agency, or regulation carries that name. The mistake is common because English trains us to double consonants. We write hippo, hippie, and hipster, so the double P feels more natural than the double A. In professional writing, the wrong version stands out. Compliance officers, auditors, and hiring managers read "HIPPA certified" the way an editor reads a typo in a headline: a small error that raises questions about the bigger claims around it.

What does HIPAA stand for?

HIPAA stands for the Health Insurance Portability and Accountability Act. Break the title apart and the spelling takes care of itself:

• Health
• Insurance
• Portability
• Accountability
• Act

One P, two A's. The "portability" half of the law protected insurance coverage for workers changing jobs. The "accountability" half is the part most people mean when they cite the law today: the privacy and security rules that govern protected health information (PHI). Our post on the Three Rules of HIPAA covers how those rules work in practice.

Is HIPAA spelled with two P's or two A's?

Two A's, one P. The acronym mirrors the words of the statute: Portability contributes the single P, and Accountability Act contributes the pair of A's at the end. If you've typed HIPPA, you've doubled the wrong letter.

What does HIPPA mean, and is it a word?

HIPPA has no meaning. It doesn't appear in the statute, the Code of Federal Regulations, or any HHS publication. It's a misspelling of HIPAA, common enough that Google quietly serves HIPAA results when you search for it.

We see the typo daily. TeachMeHIPAA has certified more than 10,000 professionals, and "HIPPA" still shows up in support emails and quiz feedback each week, often from people who just passed the training with a strong score. Knowing the law and spelling the acronym turn out to be separate skills.

When did HIPAA become HIPPA?

It didn't. The law has been spelled HIPAA since President Clinton signed it in 1996. HIPPA spread as a typo, not a change: the misspelling travels through emails, resumes, and office signage because the double-consonant pattern feels right to English speakers, and each instance teaches the next reader the wrong version.

Three ways to never forget the spelling

Memorize the full name of the law. Health Insurance Portability and Accountability Act. If you can recall the title, the acronym spells itself: one P, two A's.

The "do the opposite" technique. Your instinct says double the P, because hippo. Do the opposite of your instinct and you'll land on the right spelling nearly every time.

The double-A technique. Picture the two A's as the twin pillars of the Act: Accountability and Act itself. The law ends on two A-words, so the acronym ends on two A's.

Why the spelling matters professionally

A misspelled acronym won't get you fined. OCR penalizes privacy and security failures, like the $16 million Anthem settlement in 2018 for a breach affecting 79 million records, and spelling isn't on the audit checklist. See our rundown of the ten worst HIPAA violation cases in history for what actually draws penalties.

The cost is credibility. If a client asks for proof of HIPAA training the day before a contract signing, the certificate matters, and a cover email that reads "our staff is HIPPA certified" undercuts it. On a resume, in a policy manual, or in a bid for healthcare work, the wrong acronym signals that the details behind it may be shaky too.

Getting the foundation right is cheap. TeachMeHIPAA's training runs $17.95 per seat, takes under an hour, and issues your certificate the moment you pass. Sign up for our HIPAA courses today, and you'll spell it correctly forever, because you'll have read it fifty times by the end of the first lesson.

What HIPAA actually does

HIPAA sets national standards for how health information is used, disclosed, and secured. It limits who can see PHI without patient consent, requires safeguards for electronic records and telehealth, and gives patients rights over their own data. Providers, insurers, and their vendors carry the obligations, which is why Business Associate Agreements exist for third parties that touch PHI.

Frequently asked questions

What does HIPAA stand for? Health Insurance Portability and Accountability Act, a federal law passed in 1996.

Is HIPPA ever the correct term? No. HIPPA is a misspelling in any context. The correct acronym is HIPAA, with one P and two A's.

Why do so many people write HIPPA? English favors double consonants (hippo, hippie), so the double P feels natural. The correct double letter is the A, from Accountability Act.

How can I easily remember HIPAA? Use the "do the opposite" technique: whatever letter your instinct wants to double, double the other one.

Does misspelling HIPAA have legal consequences? No. Regulators penalize privacy and security violations, not typos. The cost of the misspelling is professional credibility, especially in compliance documents and contract bids.

Who needs to comply with HIPAA? Covered entities and their business associates. Read the full breakdown in Who Needs HIPAA Training?