By profession
For clinical and non-clinical healthcare staff: protect patient information, honor patient rights and report problems fast.
For: Clinical and non-clinical staff in hospitals, clinics, long-term care and home health, including front desk, nursing, aides, therapy, billing, support services and volunteers
Learn what the HIPAA Privacy, Security and Breach Notification Rules (45 CFR Parts 160 and 164) actually ask of you on a normal shift: what counts as protected health information, when you may share it, how to handle records requests, and how to keep screens, devices, texts and conversations safe. You will practice with a decision tree, a branching records-request scenario, two spot-the-problem exercises and an SBAR report to a privacy officer.
The course is written for everyone in the healthcare workforce, from the front desk and billing office to nurses, aides, therapists, home health staff, kitchen and housekeeping teams. No legal background is needed.
It goes beyond the usual annual slideshow. You get real HHS Office for Civil Rights enforcement cases, a dated status check on the 2024 reproductive health privacy rule and the 2024 Part 2 rule, notes on stricter state laws, and three job aids you can use the next day.
What you’ll be able to do Monday morning
8 modules · 31 lessons · about 2 contact hours
Diagram · In practice checklist · 2-question knowledge check
Diagram · In practice checklist · 2-question knowledge check
Diagram · In practice checklist · 2-question knowledge check
Diagram · In practice checklist · 2-question knowledge check
Diagram · In practice checklist · 2-question knowledge check
Diagram · In practice checklist · 2-question knowledge check
Diagram · In practice checklist · 2-question knowledge check
Diagram · In practice checklist · 3-question knowledge check
Try it now, no account needed
A branching scenario from this course. Your choices are not saved.
Practice activities
Job aids you keep
This course awards a certificate of completion for 2 contact hours of instruction. It is not approved or accredited by any licensing board, state agency or continuing education accreditor. HIPAA requires covered entities to train their workforce on their own privacy and security policies (45 CFR 164.530(b) and 164.308(a)(5)), so your employer decides whether this course is part of its required training; some states, such as Texas, add their own training rules. Check with your employer, privacy officer or licensing board whether this course meets your specific requirement.
Pathways we may pursue include review by continuing education approvers for nursing and allied health professions and arrangements with healthcare employers who use the course within their HIPAA training programs. None of these approvals exists today; the course page will show an approval only after it is granted.
Our full approvals listHIPAA requires each covered entity to train its workforce on its own policies and procedures, so your employer decides what counts. Many employers use an outside course plus a short session on local policies. This course covers the federal rules in depth and gives you a certificate of completion for 2 contact hours. Check with your privacy officer or supervisor before relying on it.
No. The course awards a certificate of completion for 2 contact hours of instruction. It is not approved or accredited by any licensing board or accreditor. Some boards accept courses from providers they have not approved, and some do not, so check with your board before counting it.
Yes. HIPAA's workforce includes everyone whose work is under the organization's control, clinical or not. The examples cover front desk, billing, support services, home health and long-term care, as well as nursing and therapy, so you will see situations that match your job.
It explains how stricter state laws work alongside HIPAA and gives verified examples from Texas and California, plus state breach notification timelines. It is not a state edition, and some states add training or confidentiality rules. Your privacy officer can tell you which state laws apply where you work.
Plan on about two hours, including eight modules, interactive exercises and a 23-question final assessment drawn from a larger bank. You need 80 percent to pass. When you pass, you can download a certificate of completion showing the course title, date and 2 contact hours.
Yes, as a dated status check. A federal court vacated most of that rule in June 2025, so its special prohibitions and attestation requirement are not in effect, while HIPAA's general protections still apply. The course explains what this means for staff and tells you where to check for updates.
This course is general education and training awareness from CE Courses Hub on HIPAA privacy and security. It is not legal, medical or professional advice and does not replace your employer's policies, your licensing board's rules, or advice from a qualified professional or your privacy officer. Completing it earns a certificate of completion for the stated contact hours; it is not approved or accredited by any licensing board, state agency or accreditor unless an approval is shown on the course page. Check with your board, employer or state agency whether this course meets your specific requirement.