Email Signature for Doctors & Medical Professionals

NPI numbers are public — they're in the National Provider Identifier registry and anyone can look them up. Including yours in your signature is a transparency signal, not a privacy risk. It's most useful in clinical contexts where other providers or insurance staff might need to reference it. For patient-facing emails, it's less relevant but not harmful. Academic physicians might omit it in correspondence unrelated to clinical care, like research or conference emails.

Strictly speaking, HIPAA doesn't mandate a specific disclaimer in email signatures. But most healthcare organizations include one as a matter of policy and risk management. The disclaimer puts recipients on notice that they may have received protected health information and instructs them on what to do if they received the email in error. It doesn't create HIPAA compliance on its own — your organization's email security practices (encryption, access controls) are what actually matters for HIPAA. The disclaimer is a procedural safeguard.

List your highest medical degree first: MD or DO. Then any board certifications relevant to your practice: FACC for cardiologists, FACS for surgeons, etc. Then administrative or academic titles if applicable: FAAP for pediatricians who are fellows of the American Academy of Pediatrics. Keep it reasonable — three to four credential abbreviations after your name is readable; eight starts to look like an alphabet soup. Full credential details belong on your hospital or practice bio page.

You should not use a personal Gmail or Yahoo account for patient communication if you want to be HIPAA-compliant. Your hospital or practice should provide a HIPAA-compliant email system. If you're in private practice and setting up your own email, look into HIPAA-compliant email providers that offer encryption and Business Associate Agreements (BAA). Your signature should reflect your professional email address, and you should be sending from that address.

If you're in private practice or a standalone clinic where patients need to find you physically, yes — include your office address. If you practice out of a large hospital system with multiple locations, linking to a 'Locations' page on the hospital website is cleaner than listing one address that might not be where the patient is going. For academic physicians whose correspondence is primarily with other providers or researchers, the department mailing address is often enough.

This is genuinely tricky. Most hospital systems prefer you use their branded email for correspondence related to that institution. Practically, many physicians maintain one primary signature reflecting their primary affiliation, and note secondary affiliations in a smaller line: 'Also affiliated with Memorial Hospital, Department of Cardiology.' Some email clients let you set up multiple signatures — use the appropriate one depending on which capacity you're writing in.

In direct patient-facing practice, a professional headshot can genuinely help — patients often feel more comfortable when they can match a face to the name on their emails. In academic or research contexts, it's less conventional. In provider-to-provider email, it's optional but not out of place. If you include one, use a professional photo in clinical attire. The casual vacation photo is obviously wrong here, but so is a photo in a lab coat if you're primarily a researcher.

Both are full physician licenses. MD (Doctor of Medicine) and DO (Doctor of Osteopathic Medicine) holders have equivalent prescribing authority and hospital privileges in the United States. List whichever degree you hold — it's accurate credential disclosure, not a hierarchy. Some DO physicians also note their osteopathic designation with FAAO if they're fellows. The choice between 'John Smith, MD' and 'John Smith, DO' is simply a matter of accuracy, not preference.