HIPAA training people actually watch.

The curriculum

Eight chapters that follow a story rather than the statute.

Each chapter answers the question the last one raised: what's at stake, what to protect, who protects it, how it may be shared — through to what to do when things go wrong.

1. 1

   The Stakes: Why HIPAA Matters

   3:31

   Your first chapter sets the stage: what HIPAA is, where the rules come from, who enforces them, and what violations cost — in dollars, and sometimes in prison time. By the end you will know why this training exists and why it applies to you personally.

2. 2

   Recognizing PHI

   4:02

   Before you can protect health information, you have to recognize it. This chapter defines protected health information — PHI — and trains your eye: what makes information PHI, the forms it takes, the narrow categories the rules exclude, and how proper de-identification takes information out of HIPAA's reach.

3. 3

   Who Must Protect It

   3:45

   HIPAA's obligations reach much further than hospitals. This chapter maps the chain of responsibility: the three kinds of covered entities the rules apply to directly, the business associates and subcontractors who handle PHI on their behalf, the contracts that bind them — and the workforce members, like you, the obligations ultimately flow down to.

4. 4

   Sharing PHI the Right Way

   4:08

   HIPAA's core discipline is knowing when protected health information may be used or shared. This chapter covers the Privacy Rule's general rule — everything is prohibited unless permitted — the two disclosures that are required, the six situations where no authorization is needed, the uses that always demand a signed authorization, and the minimum necessary standard that limits how much you access and share every day.

5. 5

   Patients and Their Rights

   3:38

   HIPAA does more than restrict what organizations do with health information — it hands patients enforceable rights over their own records. This chapter covers the notice of privacy practices, the rights of access, amendment, and accounting of disclosures, requests for restrictions and confidential communications, and how complaints work — including the rule that no one may retaliate against a patient for exercising any of these rights.

6. 6

   Securing Electronic PHI

   4:54

   The HIPAA Security Rule sets the federal minimum standards for protecting health information in electronic form. This chapter explains what ePHI is, walks through the three families of safeguards — administrative, physical, and technical — shows how required and addressable specifications work, and connects it all to the risk analysis that drives every control you encounter at work, from unique logins to screen locks.

7. 7

   When Things Go Wrong

   4:21

   Even good programs have incidents. This chapter covers the Breach Notification Rule — what counts as a breach, the presumption that an impermissible disclosure is one, and the strict deadlines for notifying individuals, the government, and sometimes the media — plus why your immediate internal reporting starts the clock in the right place. It closes with the other kind of conflict: when HIPAA and your state's law disagree, and which one you follow.

8. 8

   A Culture of Compliance

   4:52

   The final chapter turns everything you have learned into a working program: who owns compliance, why risk analysis comes first, what must be written down, why training and sanctions are mandatory, and how six years of documentation proves it all to investigators. It closes with the part only you can do — the everyday habits that make compliance a culture rather than a certificate.