Everyone needs to comply with HIPAA Privacy. So you would need the HIPAA Privacy Documentation Kit for sure.
You only need HIPAA Security if your organization stores maintain, or transmits protected health information electronically such as on computers. Since most organizations store protected health information on computers these days, most organizations will have to comply with HIPAA Security. If that applies to your organization, then you will need the HIPAA Security Documentation Kit. The only organizations that won’t need the HIPAA Security Documentation Kit are those that do everything on paper.