Course Content
Introduction To HIPPA
This module introduces you to HIPAA and explains why it was created. You'll learn key terms that will be used throughout the course, such as PHI, Covered Entities, and Business Associates. All of these are foundational to understanding your role in compliance.
0/2
The Privacy Rule
Here, you'll explore the HIPAA Privacy Rule and how it governs the use and sharing of patient information. You’ll understand what rights patients have over their health data and what situations allow or require disclosure.
0/3
The Security Rule
This module focuses on protecting electronic protected health information (ePHI). You'll learn how to secure data using administrative, physical, and technical safeguards — and how to assess and reduce risks in your workplace.
0/2
Breaches and Enforcement
In this section, you'll learn what counts as a HIPAA breach, how and when to report it, and what legal consequences can follow. Real-world examples will help you recognize and prevent violations before they happen.
0/3
Workplace Compliance
The final module brings everything together. You’ll get practical tips for maintaining HIPAA compliance in daily operations — from patient check-ins to emails and documentation.
0/4
HIPAA Essentials: Safeguarding Patient Privacy in Healthcare

The Privacy Rule, enforced by the U.S. Department of Health and Human Services (HHS), establishes national standards to protect individuals’ medical records and other personal health information.

It applies to:

  • Covered entities (providers, plans, clearinghouses)

  • Business associates (vendors who handle PHI on behalf of covered entities)

What Does the Privacy Rule Do?

  • Limits who can access PHI: Only those with a legitimate need should access it.

  • Defines when information can be shared: There are specific situations where PHI can be disclosed without patient authorization.

  • Gives patients control: Patients have rights to see and control their own health information.

Types of Information Protected:

  • Paper, electronic, and oral forms of PHI

  • Information such as past, present, or future health conditions, treatments, and payments

Example: If a receptionist sees a chart on the printer and leaves it out where others can see — that’s a potential privacy violation.