HIPAA Privacy and Security for Covered Entities
50 min! Run Time
Employees
only
of Completion
What you'll learn
Skills covered in this course
Description
This foundational course prepares supervisors, workers, students, trainees, and volunteers at covered entities such as clinics, medical practices, hospitals, surgery centers, health insurers, and clearinghouses to handle protected health information correctly.
What this course covers:
- The HIPAA Privacy and Security Rules and covered entity duties
- Proper use and disclosure of protected health information (PHI)
- Individual rights of access to PHI
- Security best practices and breach notification requirements
- HIPAA penalty and enforcement provisions
Ideal for onboarding new staff. Updated to reflect the 2024 HHS Final Rule strengthening protections for reproductive health care information.
Table of Contents
1. Introduction
2. HIPAA Basics
3. Using and Disclosing PHI
4. Individuals’ Rights of Access to PHI
5. Securing PHI
6. Breach Notification Rules
7. Enforcement
System Requirements
See System Requirements in the Coggno Knowledge Base
Author
HIPAA Privacy and Security for Covered Entities
Frequently Asked Questions
Supervisors, workers, students, trainees and volunteers at covered entities — clinics, medical practices, hospitals, surgery centres, health insurers and clearinghouses.
Because they encounter patient information like anyone else. The obligations follow contact with PHI, not employment status or seniority.
It assumes no prior HIPAA training and builds the privacy and security duties from the beginning, suitable as first training in a covered entity.
The course names them directly — clinics, practices, hospitals, surgery centres, health insurers and clearinghouses — so staff can place their own employer.
Yes. An awareness-level course covers the same duties for staff who have already completed foundational training.
Covered entities are required to provide HIPAA training to staff at the time of hire, and annual refresher training is strongly recommended to ensure ongoing compliance. This course delivers the foundational knowledge needed for initial onboarding, while our companion HIPAA Privacy & Security Awareness course is ideal for annual refresher training.
Learners will gain a thorough understanding of the HIPAA Privacy and Security Rules, including covered entities' responsibilities, the proper use and disclosure of protected health information (PHI), individual rights of access to PHI, security best practices, breach notification requirements, and HIPAA penalty and enforcement provisions. Upon completion, employees will have the working knowledge needed to handle patient health information appropriately and support their organization's compliance obligations.
This course has been updated to reflect the 2024 HHS Final Rule, which strengthens PHI protections related to reproductive health care. Following the Supreme Court's decision in Dobbs v. Jackson Women's Health Organization, HHS modified the Privacy Rule to limit the circumstances under which PHI related to reproductive health care may be used or disclosed for non-healthcare purposes.