HIPAA & Patient Privacy Essentials™

What you will learn

This program has four parts. By the end of each part, you should be able to:

Part 1: Foundations

• Explain the purpose and history of HIPAA in simple workplace terms.
• Identify PHI, PII, covered entities, and business associates in real healthcare situations.
• Describe basic patient rights under HIPAA and how staff support those rights.
• Recognize common privacy risks and respond appropriately in everyday healthcare settings.
• Use core HIPAA terminology correctly when communicating with coworkers and supervisors.
• Apply privacy expectations to workplace scenarios, observation, and self-reflection.

Part 2

• Explain the HIPAA Privacy Rule in simple terms and apply it to common workplace situations.
• Identify when PHI may be used or disclosed and apply the Minimum Necessary Standard.
• Protect patient privacy during verbal, written, and electronic communication in healthcare settings.
• Use basic EHR, password, workstation, and document-handling safeguards in daily work.
• Recognize common HIPAA violations, analyze what went wrong, and choose safer actions.
• Apply practical privacy checklists, policy guidance, and reflection to improve workplace compliance.

Part 3: Security, Breaches, and Safe Handling

• Explain the purpose and core requirements of the HIPAA Security Rule in everyday healthcare work.
• Apply administrative, physical, and technical safeguards to protect PHI in common workplace situations.
• Recognize security risks involving mobile devices, remote work, paper records, and shared equipment.
• Respond appropriately to suspected HIPAA violations by following reporting and breach notification basics.
• Use practical tools such as checklists, templates, and flowcharts to support compliant daily practice.

Part 4

• Apply HIPAA privacy requirements in common healthcare workflows such as admissions, bedside care, transport, therapy, and discharge.
• Communicate appropriately with families, visitors, outside providers, and law enforcement while protecting patient information.
• Recognize privacy risks, patient complaints, and potential violations and respond using appropriate reporting and escalation steps.
• Use practical tools such as checklists, self-assessments, audits, and pledges to support daily HIPAA compliance.
• Analyze complex case studies and choose compliant actions in routine and emergency situations.

Program details

• Self-paced online program for healthcare professionals
• Program length: 10 hours, in four parts
• Includes graded assessments you must pass to complete the program
• Earn a downloadable Certificate of Completion upon successful program completion—ideal for documenting professional development and submitting to your employer for potential reimbursement
• Each certificate has a verification ID that employers can check at nahcp.com/verify

Program length describes the length of the program, not a number of continuing-education credits. Check with your employer or licensing board before submitting a program for credit or reimbursement.