HIPAA Privacy and Security Training

About This Course

Course Objectives

Introduction to HIPAA Security Training

• Applicable Regulations
• Key Terms
• What Are Covered Entities?
• Why Employers Should Be Informed about the Proper Disposal of PHI
• Why Employees Should Be Informed about the Proper Disposal of PHI
• Why Business Associates Should Be Informed about the Proper Disposal of PHI

Applicable Regulations for Disposal of PHI

• The HITECH Act
• Categories of Covered Entities
• Risky Assumptions Based on a Misleading Definition
• What the HIPAA Rules Do Not Specify
• Training Requirements

Identification of PHI

• What Are the Personal Identifiers?
• What Qualifies as PHI?
• PHI Formats-Paper and Tangible Objects
• PHI Formats-Electronic Media and Spoken PHI 

Guidelines for Proper Disposal of PHI

• Storage and Disposal of Paper and Tangible Objects with PHI
• Disposal Techniques for Electronic Media with PHI
• General Best Practices for Disposal of Materials with PHI and ePHI
• Considerations When Hiring an Information Destruction Specialist

Potential Consequences of Improper Disposal of PHI

• Civil Penalties
• Criminal Penalties 

Develop a Plan to Ensure HIPAA Compliance

• Evaluate and Compare Your Circumstances
• Develop a Plan for Proper Disposal of PHI
• Implement the Plan and Ensure Its Execution

Summary

Additional Resources

Exam

HIPAA requires that anyone working for a covered entity who handles PHI must receive HIPAA training. This training requirement extends to volunteer workers, such as a hospital greeter or an art therapist in a nursing home. Business associates of covered entities are also mandated to train their workforce, including employees and subcontractors. Thus, anyone who is involved with the disposal of PHI, or who supervises others who dispose of PHI, must receive training that covers the PHI disposal policies and procedures of the covered entity.

Training must be provided to each new member within the workforce and when a material change has taken place within the covered entity’s workforce. Annual re-training is suggested.

This course presents an overview of the requirements for the disposal of protected health information (PHI) as set forth in the Health Insurance Portability and Accountability Act (HIPAA) of 1996. The course includes practical information about how individuals and organizations can maintain HIPAA compliance.