HIPAA Training for Addiction Recovery Organizations
In recovery care, a privacy slip can cost a resident far more than embarrassment. Train every staff member on the rules that protect the people in your care.
8 video chapters · quizzes · individual certificates
Why this training fits your work
Recovery organizations run on people whose titles never appear in a hospital org chart: house managers, peer support specialists, overnight staff, alumni volunteers driving residents to appointments. HIPAA's training expectation covers the whole workforce — employees, volunteers, and trainees alike, paid or not — whenever the organization directs their work. This course is short enough that all of them actually finish it, and each person earns an individual certificate for your records.
Turnover is a fact of life in residential treatment, and every new hire is supposed to be trained within a reasonable period of joining. An invite link brings each new staff member into your organization's account, the dashboard shows who has finished, and the CSV export gives you the training log the documentation rules expect you to keep for six years — the file you produce when a licensor, accreditor, or payer asks.
The stakes are different in this field, and your staff should understand why. The course teaches what makes information protected — that a person simply being identifiable as a resident of a treatment program connects them to their health condition — and drills the everyday discipline: conversations in shared spaces, phone confirmations, what happens when a family member calls asking whether someone is there. Disclosure in a recovery setting carries stigma that other healthcare settings don't, which is exactly why the habits matter more here.
One thing we'll say plainly, because your compliance officer will ask: this course teaches HIPAA. Most treatment programs are also subject to 42 CFR Part 2, the federal confidentiality rule specific to substance use disorder records, which is consent-based and stricter in important ways. HIPAA awareness is the foundation Part 2 builds on — but it is not a substitute for your program's Part 2 policies and training. We wrote up the difference honestly, which is more than most training vendors will do.
HIPAA is the floor here — 42 CFR Part 2 goes further
Federally assisted substance use disorder programs are covered by 42 CFR Part 2, a separate federal rule built around written patient consent, with its own redisclosure notice and extra protection against records being used in proceedings against a patient. This course covers HIPAA; Part 2 specifics belong with your compliance officer or counsel.
Read our plain-language comparison: HIPAA vs. 42 CFR Part 2Start here
The chapters most relevant to your role
The full course is eight chapters in sequence — these are the ones that speak most directly to your day-to-day.
2. Recognizing PHI
4:02Before you can protect health information, you have to recognize it. This chapter defines protected health information — PHI — and trains your eye: what makes information PHI, the forms it takes, the narrow categories the rules exclude, and how proper de-identification takes information out of HIPAA's reach.
4. Sharing PHI the Right Way
4:08HIPAA's core discipline is knowing when protected health information may be used or shared. This chapter covers the Privacy Rule's general rule — everything is prohibited unless permitted — the two disclosures that are required, the six situations where no authorization is needed, the uses that always demand a signed authorization, and the minimum necessary standard that limits how much you access and share every day.
7. When Things Go Wrong
4:21Even good programs have incidents. This chapter covers the Breach Notification Rule — what counts as a breach, the presumption that an impermissible disclosure is one, and the strict deadlines for notifying individuals, the government, and sometimes the media — plus why your immediate internal reporting starts the clock in the right place. It closes with the other kind of conflict: when HIPAA and your state's law disagree, and which one you follow.
How it works
From the first video to your certificate.
Watch each chapter (three to five minutes, transcript included), pass its five-question quiz at 80%, then a 20-question final exam drawn from those quizzes. Certificates issue instantly, and organization admins can export everyone's training records. Every claim in the course is cited to HHS and the regulations.
Start the course