HIPAA Rules and Audit Practices Training Kit: 10 Trending Courses on HIPAA Compliance

If your organization is subject to HIPAA compliance audit, you must familiarize yourself with the regulations to ensure adherence. If an electronic Protected Health Information (ePHI) breach occurs, whether deliberately or inadvertently the Office for Civil Rights of the Department of Health and Human Services (OCR) will not consider your defense justifiable.

HIPAA Privacy rule, HIPAA security Rule, HIPAA breach rule and HIPAA enforcement rules are the 4 major rules to understand on the path to HIPAA Compliance. You must be well prepared to answer questions you might face during the audit.

Professionals who may be interviewed during the audit include CEO/President/Director, HIPAA Officers, Systems Directors, Security Officers, Network Engineers, Network Administrators, Hardware specialists, DR/backup specialist, Physical Access manager, HR, Training Director, Incident Response leader and others as they may request.

We understand that you need to be well-informed. So we have compiled the following 10 Trending Courses on HIPAA Rules and Audit Practices and Compliance to help you understand compliance. Order this Training Kit today!

All Modules:

Module 1: Data Blocking and Patient Access of Medical Records under HIPAA - New Focus of Enforcement and Guidance
Module 2: HIPAA and Business Associates - New Guidance on Responsibilities and Obligations
Module 3: 2019 New Privacy Officer Training - Module 1
Module 4: 2019 New Privacy Officer Training - Module 2
Module 5: HIPAA, 42 CFR Part 2, and FERPA - Rules for Managing Student Health Information
Module 6: HIPAA Privacy Workforce Training 2019
Module 7: HIPAA vs 42 CFR Part 2 of SAMHSA regulations - Substance abuse, Mental health records security and release best practices
Module 8: How to Perform a HIPAA Risk Assessment
Module 9: HIPAA Training for Security Officers
Module 10: HIPAA Privacy Rule and Emergency Situations
Module 11: HIPAA Audit and Enforcement Update for 2022 - HHS Keeps Pressure on Access, Privacy, and Security Compliance

Part 1 : Data Blocking and Patient Access of Medical Records under HIPAA - New Focus of Enforcement and Guidance
Instructor: Jim Sheldon-Dean

Areas Covered in the Webinar:

• Learn about the latest enforcement action under HIPAA, regarding patient access of records.
• Learn about the access rights under HIPAA and CLIA regulations.
• Learn about the extensive guidance from the HHS Office of Civil Rights on access of PHI.
• Learn about the guidance from HHS regarding access of mental health information and minors' information.
• Find out what the regulations call for and what processes you must have in place for the proper approval and denial of access as appropriate.
• Learn about the required process for the review of certain denials of access.
• Learn how e-mail and texting should be handled, what can go wrong, and what can result when it does.
• Find out about HIPAA requirements for access and patient preferences, as well as the requirements to protect PHI.
• Learn about the training and education that must take place to ensure your staff handles access requests properly.
• Learn about HIPAA audit and enforcement activities and what you need to do to survive a HIPAA audit or enforcement action.

Part 2 : HIPAA and Business Associates - New Guidance on Responsibilities and Obligations
Instructor: Jim Sheldon-Dean

Areas Covered in the Webinar:

• The regulations will be reviewed and their effects on usual practices for Business Associates and their relationships with covered entities will be discussed.
• We will describe the kinds of entities that qualify as Business Associates and why it is important to carefully consider the designation before using it.
• We will examine other types of HIPAA entities, such as Hybrid entities, Affiliated Covered Entities, and Organized Health Care Arrangements, how they relate to Business Associates, and when Business Associate Agreements may be required among the various entities.
• We will review the new HHS guide to guide to the direct enforcement liabilities of Business Associates under the HIPAA regulations.
• We will explain what a Business Associate needs to do under the regulations, provide a policy framework for information security, and show what policies need to be in place.
• We will describe the required and recommended elements of a Business Associate Agreement, including identifying the template language provided by the US Department of Health and Human Services and its role in the process.
• We will explore the questions that should be posed to HIPAA Business Associates to ensure they have considered good privacy and security compliance practices in their businesses.
• The new enforcement penalty structure and the latest plans for audits by HHS OCR will be described and a plan for being prepared for audits and enforcement actions will be discussed.

Part 3 : 2019 New Privacy Officer Training - Module 1
Instructor: Nanette Awad

Areas Covered in the Webinar:

• Privacy Program
• Privacy Official
• Minimum Necessary
• Right to Access
• Right to Amend
• Right to Request Privacy Restrictions
• Notice of Privacy Practices
• Notice of Privacy Practices
• Right to Request Confidential Communications
• Accounting of Disclosures
• Authorization for Uses and Disclosures of Protected Health Information
• Safeguarding Protected Health Information
• Mitigating Inappropriate or Unauthorized Access, Use and/or Disclosure of Protected Health Information

Part 4 : 2019 New Privacy Officer Training - Module 2
Instructor: Nanette Awad

Areas Covered in the Webinar:

• Protected Health Information Breach Risk Assessment and Notification
• Community Clergy Access to Patient Listings Under the HIPAA Privacy Standards
• Designated Record Set
• Determination, Uses and Disclosures of De-Identified Information
• Fundraising Under the HIPAA Privacy Standards/HITECH
• Hybrid Entity
• Privacy Complaint Process
• Sanctions for Privacy and Information Security Violations
• Uses and Disclosures for which an Authorization or an Opportunity to Agree or Object
• Uses and Disclosures of PHI to Other Covered Entities and Health Care Providers Under
• Uses and Disclosures of Protected Health Information for Involvement in the Patient's Care and Notification Purposes
• Uses and Disclosures Required by Law
• Verification of Requestor

Part 5 : HIPAA, 42 CFR Part 2, and FERPA - Rules for Managing Student Health Information
Instructor: Jim Sheldon-Dean

Areas Covered in the Webinar:

• What FERPA controls and how to determine where it applies.
• How FERPA and HIPAA interact.
• What HIPAA allows, what SAMHSA requires, and the differences will be explained.
• We will examine how to determine if the services you provide place you under FERPA or 42 CFR Part 2.
• We will explore the means for making sure substance abuse treatment information receives the appropriate protections.
• The consent and release requirements under HIPAA, FERPA, and 42 CFR Part 2 will be explained.
• Re-release of information released under 42 CFR Part 2 will be discussed.
• Sharing of information with family and friends in an overdose incident will be explored.
• The latest guidance from the US Department of Health and Human Services on HIPAA and FERPA, as well as harmonization of SAMHSA and HIPAA will be explained.

Part 6 : HIPAA Privacy Workforce Training 2019
Instructor: Nanette Awad

Areas Covered in the Webinar:

• HIPAA and HITECH
• HIPAA Privacy Policies and Procedures
• Notice of Privacy Practices
• Breach Notification
• Civil and Criminal Penalties for Non-Compliance
• Key Privacy Definitions
• Business Associates
• Patient Rights
• Uses and Disclosures of Protected Health Information (PHI)
• Safeguarding Protected Health Information (PHI)

Part 7 : HIPAA vs 42 CFR Part 2 of SAMHSA regulations - Substance abuse, Mental health records security and release best practices
Instructor: Brian Tuttle

Areas Covered in the Webinar:

• HIPAA and SAMHSA Updates for 2018
• What is SAMHSA
• What is HIPAA
• Portable devices
• How to secure Substance Abuse Records, Mental Health Records, Alcohol Abuse Records
• When and how records can be released
• What documents required and how to Document properly
• Enforcement of the Law
• SAMHSA vs HIPAA (specific scenarios)
• Who must comply
• Best Practices to comply with SAMHSA regulations

Part 8 : How to Perform a HIPAA Risk Assessment
Instructor: James B Wener

Areas Covered in the Webinar:

• Why the risk assessment is important to the health care organization and business associates?
• What is important to consider in doing a risk assessment?
• How to do a risk assessment?
• When to look for outside assistance?
• How to link your assessment to your training responsibilities?
• How to interpret the results of the risk assessment?
• What to do with the results of your assessment?

Part 9 : HIPAA Training for Security Officers
Instructor: Brian Tuttle

Areas Covered in the Webinar:

• Updates for 2018
• Requirements of Compliance Officers
• New definition of what constitutes protected health information
• Real life litigated cases
• BYOD
• Portable devices
• Business associates and the increased burden
• Emailing of PHI
• Texting of PHI
• Federal Audit Process
• HIPAA and suing – how this works
• Risk Assessment
• Best resources

Part 10 : HIPAA Privacy Rule and Emergency Situations
Instructor: Christine Zack

Areas Covered in the Webinar:

• General Overview of HIPAA Privacy Rule
• HIPAA Privacy Rule: “Emergency Circumstances” provisions
• What covered entities/business associates are involved in emergency situations? e.g. is a private security company that hires paramedics to work at a music festival a covered entity? What about concert-goers who are off-duty healthcare professionals? Colleges and universities?
• Carve-outs from the general rule enumerated and explained
• Scenarios that qualify as Emergency Circumstances
• Mass Casualty Events?
• Flu Outbreaks?
• College student who has alcohol poisoning?
• Unconscious and injured driver involved in a car accident?

Part 11 : HIPAA Audit and Enforcement Update for 2022 - HHS Keeps Pressure on Access, Privacy, and Security Compliance
Instructor: Jim Sheldon-Dean

Areas Covered in the Webinar:

• Fines and penalties for violations of the HIPAA regulations include mandatory fines for willful neglect of the rules that begin at over $10,000 minimum, but showing due diligence can reduce culpability and penalties.
• Find out what HHS OCR is likely to ask you if you are selected for an audit or enforcement review, and what you'll have to have prepared already when they do.
• The HIPAA Audit Protocol will be examined along with the sets of questions asked at other HIPAA audits previously.
• HIPAA enforcement actions will be explored, to illustrate violations that can be avoided and the proper practices that can help compliance.
• Relaxation of enforcement for the pandemic will be explained, including how it works during and after the emergency.
• Learn how having a good compliance process can help you stay compliant more easily.
• Find out what you'll need to have documented to survive an audit or enforcement review and avoid fines.
• Learn how to use the contents of the HIPAA Audit Protocol as the foundation of your compliance activities and documentation.