The HIPAA training plan outlines training that will be provided to staff on privacy and security. It will analyze which staff need training, provide initial and orientation training, and use video conferencing and online modules. Training sessions will be held on May 15-17 and cover topics like protected health information, minimum necessary standards, patient rights, and security awareness. Tests will be given after to assess understanding, and refresher training will occur yearly.

1. HIPAA Training Plan
Training will be offered to all staff who have not received complete HIPAA training. Both
security and privacy will be included in the plan and the training will proceed with the following:
 Analyze what staff need HIPAA training by surveying all staff members by e-mail
 Future employees will receive HIPAA training during orientation
 Training time frame will be 1-1/2 hours for privacy and 1-1/2 hours for security training
 Some of the topics regarding privacy will include:
o Identifying the Protected Health Information
o Understanding the minimum necessary rule
o Understanding the rules about when and how Protected Health Information may
be disclosed
o The importance of confidentiality
o Avoiding snooping
o Keeping an accounting of disclosures
o Patient rights and authorizations
o Consequences of not following HIPAA regulations
o Medical Identity Theft
 Some topics regarding security will include:
o Security awareness and training
o Implementation of security reminders
o Protection against malicious software
o Log-in monitoring, log-in attempts, and reporting discrepancies
o Password management and procedures for creating, changing, and safeguarding
passwords
 The first training session will begin on Monday, May 15 at 9 a.m. There will be another
training session on Tuesday May 16 at 9 a.m., and the final class on Wednesday May 17
at 1:00 p.m.
 The staff who are required to complete training will be notified by e-mail of the date and
time of their training. Any change in schedule will need to be coordinated with the HIM
trainer.
 The method of training will be by video conferencing.
o Office staff will report to room 12C for training on their assigned day and time
o Home agents will receive the link with their e-mail along with the phone number
and access code for the video conference
o Learners will be able to ask questions during the video conference training
 For any staff not available on the planned training days, a training simulation module will
be available that they will be able to access online. The online training time will need to
be coordinated with the HIM supervisor. The supervisor will assist the staff member in
setting up the training module in the training room.

2.  After completion of the training a test will be given to all learners which they will need to
complete and submit for grading. Home agents will have a link with the test and results
will be automatically compiled as soon as the test is submitted. The staff members who
will do the simulation training on a different date will take the test upon completion of
the simulation training and the results will be automatically compiled.
 Results of all test will be documented on the employee’s file as well as recorded and kept
on file in the HIM department for auditing purposes
 Any employees who do not pass the test will be able to re-take the training and test by
scheduling with the HIM supervisor.
 A survey will be sent to all staff who received the test to determine what was effective
and what changes are suggested or ideas for making the training better.
Note: Refresher training will be done yearly for all employees where any policy changes and
updates will be communicated. We appreciate the loyalty and hard work of our staff. HIPAA
compliance is an ongoing process and we want to make sure our staff is aware and
understands all aspects of policy. It is our responsibility to make sure they are ready for any
situation.