HIPAA Compliance, Patient Privacy & Health Records Security
Understanding Protected Health Information (PHI) is legally required for all healthcare staff. Learn how to safeguard electronic medical records (ePHI), manage mobile communications, understand the Minimum Necessary rule, avoid common violations, and handle potential breach notifications.
Course Director & Lead
Sophia Martinez, JD, CHPC
JD, Certified in Healthcare Privacy Compliance (CHPC)
Free registration required for lesson access
What You Will Learn
Course Objectives
- Identify the 18 specific identifiers constituting Protected Health Information (PHI)
- Implement the 'Minimum Necessary' standard across daily care and communications
- Secure mobile devices, text messaging, and email under the HIPAA Security Rule
- Follow correct incident reporting procedures when a privacy breach is suspected
Curriculum & Syllabus
2 modules • 5 lessons • Passing score: 80%
1.1 Introduction to HIPAA & The 18 PHI Identifiers
What qualifies as PHI, from names and birth dates to geographic codes and biometric identifiers.
1.2 The Minimum Necessary Rule in Daily Practice
Limiting data access and disclosure to only what is strictly required to accomplish the intended purpose.
2.1 Mobile Devices, Photos & Social Media Dangers
Zero-tolerance rules regarding photographing patients or care environments on personal smartphones.
2.2 Breach Notification Protocols & Sanctions
Reporting lost laptops, misdirected faxes, or phishing scams immediately to the Privacy Officer.
2.3 Annual HIPAA Compliance Certification Exam
Mandatory compliance exam with scenarios testing Privacy and Security rules.
Course Prerequisites
- Applicable for all healthcare professionals, administrative personnel, and contractors
Instructor
Sophia Martinez, JD, CHPC
Healthcare Compliance Counsel • JD, Certified in Healthcare Privacy Compliance (CHPC)
12 years advising Maryland healthcare systems and home health agencies on federal regulatory adherence, OCR audits, and data governance.