This document discusses the importance of training healthcare employees on maintaining patient confidentiality and complying with HIPAA guidelines. It recommends appointing a HIPAA compliance officer and providing training to all employees on privacy, security, and regulations. The training should communicate any changes to HIPAA protocols and the consequences of violations. Administrative duties also include ensuring paper and electronic medical records are securely stored and accessed only by authorized employees.

1. Confidentiality
Training for
Employees on
Medical Records
CINDY CARNEY
MHA 690

2. Introduction
 Maintaining patient confidentiality is important
for every healthcare organization. A key
component of that is making sure that all
employees are trained in HIPAA and that they
understand the consequences of violating those
guidelines. Proper training helps to ensure this
doesn’t happen.

3. Administrative Duties for Training
 Creation of a HIPAA compliance officer: Appointing a compliance
officer can help ensure that all HIPAA guidelines are being followed
and lead employees in training sessions.
 Training for all employees: Providing training in privacy, security,
unsecured breaches, and regulations and how these rules and
regulation affect your organization is crucial (Salz, T, Sep 25, 2013).
 Communication: Communicating with employees whenever
changes are made with HIPAA in regards to privacy and security of
a patients private health information is crucial to making sure that
guidelines are continually being followed. Providing notifications to
employees is critical every time there is a change in protocol that
may affect medical privacy and how it is handled.

4. Privacy Measures
 Making sure that paper charts are not left in an unsecure
area where someone who should not have access to
the health information and that all charts are stored in a
secure area with limited access.
 Making sure that computers are password protected to
avoid unauthorized access and limiting access to a
patients electronic medical record for employees that
don’t need access to the information.
 Having protection in place with the use of proper
firewalls as well.

5. Privacy Measures Continued
 Making sure that all employees know that they are not
allowed to share any private health information on
patients with anyone without the patients permission.
 Medical organizations must evaluate and enhance all
protections needed to help prevent unnecessary or
inappropriate access (Salz, T, Sep 25, 2013).
 Have a confidential reporting system in place for
employees or other health care workers who want to
report a violation of privacy.

6. Conclusion
Maintaining privacy of a patients private health
information should be a top priority. Providing
proper training to all employees and making sure
they understand what privacy involves and when
they can and cannot share a patients private
health information is vital in making sure that they
health care organization remains compliant.

7. References
 Salz, Terry., (Sep 25, 2013), HIPAA: Training critical
to protect patients, practice. Medical
Economics, 90.18, pgs 43-44, 47. Retrieved
from ProQuest.