HIPAA Basics for Healthcare Professionals

This module describes HIPAA and its amendments, provides an overview of HIPAA terminology, and explores scenarios that may require additional privacy and security safeguards. Learners will explore the intent of HIPAA and its amendments, which agency enforces HIPAA, and when healthcare providers should introduce additional privacy and security safeguards.

Recommended Use: Required
ID (Language): 20830 (English)
Author(s): Julie D'Orso, MHA, CHC, PMP - Central Piedmont Community College

In this module, learners review when HIPAA applies and what requirements healthcare professionals should be aware of to protect patients’ individually identifiable health information. The module provides learners with scenarios that do and do not require HIPAA authorization, common examples of business associates in healthcare and the requirements of a business associate agreement, as well as safeguards to protect PHI, including the minimum necessary standard. The module further covers the Privacy Rule, Security Rule, and Omnibus Rule requirements.

Recommended Use: Required
ID (Language): 20831 (English)
Author(s): Julie D'Orso, MHA, CHC, PMP - Central Piedmont Community College

This module discusses the six circumstances when PHI disclosures are permissible. It also reviews reasonable safeguards that must be in place to disclose PHI and explores when HIPAA requires the disclosure of PHI.

Recommended Use: Required
ID (Language): 20832 (English)
Author(s): Julie D'Orso, MHA, CHC, PMP - Central Piedmont Community College

In this module, learners review the administrative requirements in the Privacy Rule, including the requirements for documentation, training, sanctions, safeguards, and complaints. In addition, the module explains how an organization can meet these requirements and discusses penalties for noncompliance.

Recommended Use: Required
ID (Language): 20833 (English)
Author(s): Julie D'Orso, MHA, CHC, PMP - Central Piedmont Community College

This module explores the concept of patient rights and explains what covered entities need to know to comply with the applicable HIPAA requirements, including appropriate grounds to deny access. It covers the elements of the Privacy Rule and its requirements for the Notice of Privacy Practices and defines the designated record set.

Recommended Use: Required
ID (Language): 20834 (English)
Author(s): Julie D'Orso, MHA, CHC, PMP - Central Piedmont Community College

In this last module, learners review enforcement and potential penalties for data breaches and other violations under HIPAA. The module provides learners with exceptions to a breach and lists the notifications required when a breach occurs.

Recommended Use: Required
ID (Language): 20835 (English)
Author(s): Julie D'Orso, MHA, CHC, PMP - Central Piedmont Community College