HIPAA Compliance for Healthcare Workers

About this course

Practical HIPAA training for healthcare and collection-site workers: the Privacy, Security and Breach Notification Rules, protected health information, minimum necessary, patient rights, safeguarding records and devices, and how to recognize and report a privacy incident.

What you will learn

• Explain HIPAA and who must follow it – Describe the Privacy, Security, Breach Notification, and Enforcement Rules, identify covered entities, business associates, and workforce members, and distinguish federal requirements from organizational policy and general best practice.
• Identify protected health information in every form – Recognize PHI and ePHI in paper, electronic, verbal, and visual form, apply the 18 identifier categories, and explain what de-identification does and does not mean.
• Apply the Privacy Rule to daily work – Determine when PHI may be used or disclosed, apply the minimum necessary standard and its exceptions, handle family member requests, and recognize permitted incidental disclosures.
• Support patient rights under HIPAA – Recognize requests for access, amendment, restrictions, confidential communications, accounting of disclosures, and complaints, and route them correctly within the required timeframes.
• Protect electronic patient information – Apply administrative, physical, and technical safeguards, use credentials and approved channels correctly, and recognize phishing, malware, and social engineering attempts.
• Respond to privacy and security incidents – Recognize a potential incident, contain it without destroying information, report promptly through the organization’s process, and explain the breach determination and notification requirements.