Healthcare Compliance & HIPAA Security

What you will be able to do

• Identify covered entities, business associates, and what counts as PHI and ePHI.
• Apply the Privacy Rule: permitted uses, minimum necessary, and patient rights.
• Map the Security Rule's administrative, physical, and technical safeguards and the required vs addressable distinction.
• Conduct a HIPAA risk analysis and turn it into a risk management plan.
• Put BAAs in place and run the breach-notification decision and timelines.
• Operate and defend a HIPAA compliance program through training, documentation, and OCR enforcement.

What is inside

6 modules, 12 lessons. Each module ends in a graded quiz.

1. 01

   HIPAA Foundations: the Rules and Who Is Covered

   A working introduction to who HIPAA regulates, what protected health information is, and how the Privacy, Security, Breach Notification, and Enforcement Rules fit together under OCR oversight. It sets the vocabulary and legal structure you will rely on throughout the rest of the course.

   2 lessons · 5 quiz questions

2. 02

   The HIPAA Privacy Rule

   The HIPAA Privacy Rule sets the national standard for how covered entities and their business associates may use and disclose protected health information, and it grants individuals a set of enforceable rights over that information. This module covers the permitted uses and disclosures, the minimum necessary standard, and the individual rights and notices that make the rule operational.

   2 lessons · 5 quiz questions

3. 03

   The HIPAA Security Rule: Safeguards

   The HIPAA Security Rule sets national standards for protecting electronic protected health information through administrative, physical, and technical safeguards. This module explains each safeguard family, the required versus addressable distinction, and where encryption and documentation fit.

   2 lessons · 5 quiz questions

4. 04

   Risk Analysis and Risk Management

   The HIPAA Security Rule treats risk analysis and risk management as the foundation of a compliant security program. This module shows how to conduct an accurate and thorough risk analysis across all electronic protected health information and how to turn its findings into a living, prioritized risk management process.

   2 lessons · 5 quiz questions

5. 05

   Business Associates and Breach Notification

   HIPAA responsibilities follow protected health information wherever it travels, so this module traces the chain of accountability from covered entities through business associates and their subcontractors, then walks through how a breach of unsecured PHI is defined, assessed, and reported. You will learn what a Business Associate Agreement must contain, how HITECH made business associates directly liable, and the notification duties and timelines that follow a breach.

   2 lessons · 5 quiz questions

6. 06

   Running a HIPAA Compliance Program

   A practical look at how a HIPAA compliance program actually operates day to day, from written policies and trained people to how regulators investigate and what keeps the program current. The focus is on living practice, not paperwork filed away and forgotten.

   2 lessons · 5 quiz questions