HIPAA Training
Sidebar
HIPAA Training
Our office provides annual HIPAA training for individuals who work in areas of the campus that are within the University of Louisville's HIPAA health care component. HIPAA training must also be completed by faculty, staff, and students who are working on projects for which the University is a Business Associate.
HIPAA training is also available upon request to faculty, staff and students who are not within the University's HIPAA health care component.
HIPAA training may be completed online or via an interactive, live group training session. Departments that prefer live training should contact the Privacy Office to schedule.
Please note that all faculty and staff must complete the University's annual Information Security Training regardless of whether they are employed within the HIPAA health care component.
For further information regarding HIPAA Privacy training, or to schedule a training session, contact us at 502-852-3803 or privacy@louisville.edu.
HIPAA Training FAQs
The University of Louisville uses the Vector SafeColleges platform to provide online HIPAA Privacy training.
To access the training:
- Go to https://louisville-ky.safecolleges.com. (Your login/password is your University login/password).
- Choose the “HIPAA Overview” module.
- Upon completion of all Required Modules and achieving 80% overall correct score, a link will appear to access your completion certificate. Keep a copy of this report for your records.
Helpful Tips:
- Use the Chrome or Edge browsers (Firefox is not compatible with SafeColleges)
- If you are having trouble accessing the SafeColleges/Vector website:
- If you are accessing training from a computer:
- Restart your browser. (Note: On a Mac you’ll need to fully quit the browser).
- Make sure you are using a recent version of Google Chrome, Mozilla Firefox, Internet Explorer, or Safari. If you have any pending updates, they may need to be completed to move forward with training.
- Clear your browser’s cache, which is typically located under your browser’s history settings.
- It is possible that device-specific browser extensions and/or pop-up blockers may be interfering with your training. Try accessing the training from another browser to rule out this possibility.
- If you are accessing training from a computer:
- If you are accessing training from a mobile device: The SafeColleges/Vector system is compatible with many mobile devices; however, some users may have personal configurations that prevent certain courses from loading. Additionally, some custom and policy courses are best displayed on a computer. If you are experiencing difficulty loading our training on a personal device, try accessing the courses through a laptop or desktop computer.
HIPAA training is required for members of the workforce:
- In any position that would allow direct or indirect contact with PHI, whether in electronic, paper, or verbal form; or
- In any position that includes direct contact, or the possibility of direct contact, with patients/clients.
All faculty, staff, and students who are employed within the UofL HIPAA health care component must complete HIPAA training annually.
HIPAA training shall be provided as follows:
- To each new member of the workforce within 30 days after the Individual joins the workforce;
- To each workforce member who transfers from a position within UofL that did not require HIPAA Privacy training to a position within UofL which requires HIPAA Privacy training, to be completed within thirty (30) days of job change; and
- To each member of the workforce whose functions are affected by a material change in the policies or procedures required by HIPAA, within 30 days after the material change becomes effective.
Training requirements for specific schools/departments/groups are described below:
Schools of Dentistry and Medicine - These schools are included within the health care component of the University of Louisville hybrid covered entity; thus, HIPAA training is required for their faculty, staff, and students.
Department of Athletics - Staff members who process the level-funded insurance plan offered to student athletes are required to complete HIPAA training.
Department of Audit Services - All individuals in this department are required to complete HIPAA training.
Department of Environmental Health & Safety - All individuals in this department are required to complete HIPAA training.
Department of Risk Management - All individuals in this department are required to complete HIPAA training.
Department of University Advancement/Development - Staff members within the subdivision of this department who perform fundraising activities are required to complete HIPAA training.
Human Resources - Staff members within the subdivision of this department who process the employee health plan (e.g., Benefits) and staff members who may conduct investigations within the health care component are required to complete HIPAA training.
Information Security Compliance Office - All individuals in this department are required to complete HIPAA training.
Information Technology - All individuals in this department are required to complete HIPAA training.
Office of Communications & Marketing - All individuals in this department are required to complete HIPAA training.
Office of Finance/Controller - Staff members within the subdivision of the Controller’s Office which process health care related payments are required to complete HIPAA training.
Procurement Services - Staff members who handle ProCard transactions are required to complete HIPAA training.
Researchers - Individuals who conduct human subjects research that requires access to, or collection of protected health information are required to complete the Human Subjects & Research course. This applies to all individuals conducting UofL research, regardless of which University of Louisville School or Department holds their job/role assignment.
School of Nursing - The School of Nursing is not included within the University of Louisville health care component of the hybrid covered entity; therefore, HIPAA Privacy training is not required unless requested by School of Nursing administration.
School of Public Health and Information Sciences (SPHIS) - SPHIS is not included within the University of Louisville health care component of the hybrid covered entity; therefore, HIPAA Privacy training is not required unless requested by SPHIS administration.
Department of University Counsel - All individuals in this department are required to complete HIPAA training.
University Archives & Records - Staff members within the subdivision of this department who handle and/or store protected health information are required to complete HIPAA training.
University Integrity & Compliance Office - All individuals in this department are required to complete HIPAA training.
University Privacy Office - All individuals in this department are required to complete HIPAA training.
Questions or comments regarding the content of the HIPAA training should be directed to the Privacy Office at 502-852-3803 or via email at privacy@louisville.edu.
Questions or comments regarding the content of the Information Security training should be directed to the Information Security Office at 502-852-0567 or via email at isopol@louisville.edu.