HIPAA Awareness Training
Syllabus
Lesson 1: What is HIPAA?
Goal- For you to understand the basics about what HIPAA is, why its important and who has to follow the HIPAA rules.
Key Questions Included
- What is the overall summary of the law?
- What is the purpose and why is it needed?
- What does HIPAA compliance mean?
- What is the impact of a HIPAA security breach on individuals?
- What is the impact of a HIPAA security breach on companies in terms of fines and penalties?
- What is the impact of a HIPAA security breach on companies besides fines and penalties?
- What is a Covered Enity?
- What is a Business Associate?
- What are some of the specific things health plans should consider as part of their HIPAA compliance strategy?
- What are some of the specific things data professionals (such as technology vendors or researchers) should consider as part of their HIPAA compliance strategy?
- What are some of the specific things healthcare providers should consider as part of their HIPAA compliance strategy?
Lesson 2: What are the 3 major rules of HIPAA?
Goal- For you to become familiar with the major components of HIPAA, including the Privacy Rule, The Security Rule and the Minimum Necessary Rule.
Key Questions Included
- What does the Privacy Rule do?
- What is the Security Rule?
- Who needs to comply with the Security Rule?
- How is minimum necessary defined?
- How does an entity determine who should have access to PHI?
Lesson 3: Protected Health Information (PHI) Deep Dive
Goal: For you to become familiar with the criteria for determining whether data should be considered Protected Health Information (PHI) and concepts related to data encryption.
Key questions included:
- What does Protected Health Information (PHI) mean? What does "identifiable" data mean?
- What is encryption / de-encryption?