Course Descriptions

HIPAA Privacy

HIPAA Privacy training is required for members of the workforce: 1)  In any position that would allow direct or indirect contact with PHI, whether in electronic, paper, or verbal form; or 2)  In any position that includes direct contact, or the possibility of direct contact, with patients/clients.

HIPAA Privacy training shall be provided as follows:

  1. To each new member of the workforce within 30 days after the Individual joins the workforce;
  2. To each workforce member who transfers from a position within UofL that did not require HIPAA Privacy training to a position within UofL which requires HIPAA Privacy training, to be completed within thirty (30) days of job change; and
  3. To each member of the workforce whose functions are affected by a material change in the policies or procedures required by HIPAA, within 30 days after the material change becomes effective.

HIPAA Privacy training is effective for one (1) year.  Retraining of workforce members must be completed within the thirty (30) days prior to expiration of current training in order to remain in compliance with training requirements.

[Note:  Basics of Information Security training is provided on an annual basis as part of the Attestation and Disclosure Form (ADF)]

 

Additional HIPAA Training

Human Subjects and HIPAA Research Training

Human Subjects and HIPAA Research Training is required for workforce members who will be performing human subject research that is reviewed by the IRB and that involves access to PHI.

Human Subjects and HIPAA Research Training must be provided as follows:

  1. To each new member of the workforce who will be performing human subject research within 30 days after the person joins the covered entity’s workforce;
  2. To each workforce member who transfers from a position within UofL that did not require Human Subjects and HIPAA Research Training to a position within UofL that requires Human Subjects and HIPAA Research Training, to be completed within thirty (30) days of job change.

Human Subjects and HIPAA Research Training is effective for one (1) year.  Retraining of workforce members must be completed within the thirty (30) days prior to expiration of current training in order to remain in compliance with training requirements.

 

HIPAA Privacy for Marketing Training

HIPAA Privacy for Marketing Training is required for workforce members who will be performing job responsibilities which involve marketing activities.    

HIPAA Privacy for Marketing Training must be provided as follows:

  1. To each new member of the covered entity workforce who will be performing job responsibilities which involve marketing activities, within 30 days after the person joins the covered entity’s workforce;
  2. To each workforce member who transfers from a position within UofL that did not require HIPAA Privacy for Marketing Training to a position within UofL that requires HIPAA Privacy for Marketing Training, to be completed within thirty (30) days of job change.

HIPAA Privacy for Marketing Training is effective for two (2) years.  Retraining of workforce members must be completed within the thirty (30) days prior to expiration of current training in order to remain in compliance with training requirements.


HIPAA Privacy for Development Training

HIPAA Privacy for Development Training is required for workforce members who will be performing job responsibilities which involve development and/or fundraising activities.    

HIPAA Privacy for Development Training must be provided as follows:

  1. To each new member of the covered entity workforce who will be performing job responsibilities which involve development and/or fundraising, within 30 days after the person joins the covered entity’s workforce;
  2. To each workforce member who transfers from a position within UofL that did not require HIPAA Privacy for Development Training to a position within UofL that requires HIPAA Privacy for Development Training, to be completed within thirty (30) days of job change.

HIPAA Privacy for Development Training is effective for two (2) years.  Retraining of workforce members must be completed within the thirty (30) days prior to expiration of current training in order to remain in compliance with training requirements.