Course Content
Introduction To HIPPA
This module introduces you to HIPAA and explains why it was created. You'll learn key terms that will be used throughout the course, such as PHI, Covered Entities, and Business Associates. All of these are foundational to understanding your role in compliance.
0/2
The Privacy Rule
Here, you'll explore the HIPAA Privacy Rule and how it governs the use and sharing of patient information. You’ll understand what rights patients have over their health data and what situations allow or require disclosure.
0/3
The Security Rule
This module focuses on protecting electronic protected health information (ePHI). You'll learn how to secure data using administrative, physical, and technical safeguards — and how to assess and reduce risks in your workplace.
0/2
Breaches and Enforcement
In this section, you'll learn what counts as a HIPAA breach, how and when to report it, and what legal consequences can follow. Real-world examples will help you recognize and prevent violations before they happen.
0/3
Workplace Compliance
The final module brings everything together. You’ll get practical tips for maintaining HIPAA compliance in daily operations — from patient check-ins to emails and documentation.
0/4
HIPAA Essentials: Safeguarding Patient Privacy in Healthcare

Under HIPAA, patients have clear rights when it comes to their health information. Healthcare staff need to understand and respect these rights.

1. Right to Access Records

Patients can request to see or get a copy of their medical records, usually within 30 days.

2. Right to Request Corrections

If a patient believes something is incorrect, they can request a correction.

3. Right to an Accounting of Disclosures

Patients can ask for a list of certain disclosures of their PHI that were not related to treatment, payment, or healthcare operations.

4. Right to Request Restrictions

Patients may ask you not to share information with certain people or for certain purposes (e.g., don’t share visit info with a spouse).

5. Right to Confidential Communication

Patients can request to be contacted in specific ways (e.g., only by mail, not by phone).

6. Right to Receive a Notice of Privacy Practices (NPP)

At their first visit, patients must be given a written notice explaining how their information may be used and shared.

Your Role: Respect these rights and always ask a supervisor if you’re unsure about what to disclose or how.