HIPAA: Training for Clinical Staff

This course provides an overview of the three HIPAA rules as they relate to clinicians and prepares learners to identify and mitigate common risk areas in the clinic setting. It defines protected health information (PHI) and details when and why PHI would be appropriate to disclose. It also explores the nuances of the Privacy Rule by providing interactive components that engage the learner with real-world scenarios. Finally, this course discusses best practices to safeguard electronic patient data and covers what to do in the event of a HIPAA breach.

Course Objectives
1. Outline the Privacy Rule, the Security Rule, and the Breach Notification Rule
2. Define what protected health information (PHI) is, and clarify when and how it can be used or disclosed
3. Highlight which uses of PHI require written authorization from the subject of the PHI
4. Visualize data security at the individual and organizational levels
5. Identify how to report data breaches should they occur


This course meets the regulatory standards outlined in HIPAA; Pub.L. 104-191, 110 Stat. 1936

Estimated Runtime: 20 minutes

Last Updated: February 26, 2025




Reviewed and approved by
Nancy Allen, BSN, RNC, CMC

NOTE: This course is not a substitute for legal advice for any individual provider or situation. Always consult your company’s legal or compliance personnel with any questions or concerns related to this subject matter.