General HIPAA Awareness Training

Our office provides general HIPAA Privacy and Security awareness training for applicable faculty, staff and students in addition to individuals who are considered workforce members of our hybrid (covered) entity. HIPAA policy and procedure training specific to the clinic, hospital or other facility may be required by the facility where students, staff or health care providers are assigned to work. Contrary to our general HIPAA Awareness training, facility-specific HIPAA training would encompass policies and protocols applicable to student, staff, and provider roles in the health care setting.

We also provide HIPAA Research training for individuals working on UofL research projects involving protected health information (PHI). The status of HIPAA Research training assignment completions is maintained by the Office of Research Integrity ( and may be accessed by authorized individuals through University Report RI-31.

September 2013 - Course Updates [NEW]

HIPAA Privacy and HIPAA Research modules were revised in September 2013, to include content from new HITECH rules.  UofL will document training assignments and completions on the new HITECH content, either as a supplemental course for those who have previously completed HIPAA training, or as a standard HIPAA training for new workforce members.

Workforce members joining UofL after August 31, 2013, will complete the new HIPAA courses as appropriate.  Workforce members who were assigned HIPAA training prior to August 31, 2013, will complete an additional course covering the HITECH changes only (i.e., HITECH Final Rule and/or HITECH for Researchers), as appropriate.