HIPAA for Business Associates
Online Training Certificate Course
From the highest rated and most trusted online training company - since 2008.
This course is offered in partnership with HIPAA Exams, a 360training company.
This HIPAA online training course teaches healthcare professionals what PHI needs protecting as well as the modern standards of protection endorsed by the industry. HIPAA employee training protects patient confidentiality while also protecting healthcare facilities from regulatory exposure for noncompliance.
The Health Insurance Portability and Affordability Act (HIPAA) of 1996 is designed to protect patients' private information. HIPAA requirements are complex, strict, and well-enforced. Healthcare professionals need HIPAA privacy and security training to understand how to safeguard protected health information (PHI).
This course is in partnership with HIPAA Exams. HIPAA Exams and Compliance Training Online™ are divisions of the 360training™.
This course is for:
Employees in the healthcare industry who manage PHI must receive a HIPAA training certification. For example, physicians and medical transcriptionists must protect diagnoses. Billing personnel must protect contact and payment information. These are just some of the many healthcare professions that require HIPAA certification.
Case Study: In spring of 2015, Cornell Pharmacy, an independent pharmacy in Denver, was fined $125,000 for HIPAA violations related to improper disposal of PHI. The OCR found that this small health care provider, whose primary customers are hospice care organizations, had failed to establish policies and procedures for PHI disposal. Cornell Pharmacy had improperly disposed the medical records of 1,610 patients by placing them in an open trash container accessible to the public. Furthermore, no training had been provided to the Cornell Pharmacy workforce. In addition to the hefty fine, the pharmacy was required to adopt an action plan, implement HIPAA standards, and provide training to its workforce within 30 days.
Key Takeaways: Having a plan in place is not optional. The plan must outline the policies for HIPAA compliance, and provide guidelines for everyone associated with the covered entity who handles materials with PHI. Even more important, the covered entity must train its workforce to ensure that the plan is executed without fail.
Governing Regulations
HIPAA OSHA training is required under the Privacy and Security Rules, including 45 CFR 164.530. Workers must receive training with a reasonable period after an organization's compliance date. HIPAA privacy training covers topics that are required, while HIPAA security training covers topics deemed "addressable" according to an organization's discretion.
What You'll Learn
Introduction to HIPAA Security Training
- Applicable Regulations
- Key Terms
- What Are Covered Entities?
- Why Employers Should Be Informed about the Proper Disposal of PHI
- Why Employees Should Be Informed about the Proper Disposal of PHI
- Why Business Associates Should Be Informed about the Proper Disposal of PHI
Applicable Regulations for Disposal of PHI
- The HITECH Act
- Categories of Covered Entities
- Risky Assumptions Based on a Misleading Definition
- What the HIPAA Rules Do Not Specify
- Training Requirements
Identification of PHI
- What Are the Personal Identifiers?
- What Qualifies as PHI?
- PHI Formats-Paper and Tangible Objects
- PHI Formats-Electronic Media and Spoken PHI
Guidelines for Proper Disposal of PHI
- Storage and Disposal of Paper and Tangible Objects with PHI
- Disposal Techniques for Electronic Media with PHI
- General Best Practices for Disposal of Materials with PHI and ePHI
- Considerations When Hiring an Information Destruction Specialist
Potential Consequences of Improper Disposal of PHI
- Civil Penalties
- Criminal Penalties
Develop a Plan to Ensure HIPAA Compliance
- Evaluate and Compare Your Circumstances
- Develop a Plan for Proper Disposal of PHI
- Implement the Plan and Ensure Its Execution
Summary
Additional Resources
Exam
Most of our courses take about two (2) hours to complete. If a final exam is included, you should plan for an additional 30 minutes. Courses that require additional training time will clearly state that in the course title or description.
You’ll have unlimited access during your enrollment or access period. Most CTO courses must be completed within 90 days of purchase. OSHA-authorized Outreach Training provides up to 180 days to finish the course and required survey. Timeframes vary depending on the specific course and regulatory requirements. Please refer to our Terms & Conditions for more details.
Because our courses are self-paced, you can log in and out as needed and complete your training on a schedule that works best for you.
HIPAA requires retraining whenever there is a material change in affected policies or procedures. Annual employee retraining is suggested to accommodate this requirement. An online certification makes it easier to provide approved HIPAA compliance and safety training.