HIPAA Security Training

Viewing 9 reply threads
  • Author
    • #5226

      OK folks, here is my dilemma:  we have a requirement to have employees take a HIPAA security test for HIPAA training and am not sure how it applies to temporary employees.  One scenario that was brought to me was what if there is a temporary employee who works for one day, a couple of days or one week; do they need to take this training?  HIPAA guidelines are not very clear and concise in my opinion. 

      I just want to make sure that we are covered and fulfill the HIPAA requirements for security training.  Has anyone been in this situation before?

      Thanks all!

    • #33025

      I don’t know if it is applicable to the private sector, but when I was  in the National Guard, the only people that had to be HIPAA certified were the one handling HIPAA protected information. We basically had only senior enlisted and officers go through the training.

    • #33026

      My company does HIPAA-related stuff but I’ve never had to be certified for anything.  Maybe this is something that needs investigating…

    • #33027

      I have also not heard of any HIPAA training. But following are my views on such trainings.

      All regulations like HIPAA, SarbOx, PCI-DSS etc are based on Best Practices in relevant industries. You can organize a formal training about user awareness for the employees who are handling and processing HIPAA records and infrastructure also. I understand majority of the people in a company who are HIPAA compliant will be desktop operators who are accessing HIPAA records. They should be trained about the best practices like password protection, clear screen policy etc.. You might be having some IT infra people who are maintaining hardware and network processing HIPAA records. They should be trained about the security of the hardware and network from leaking of HIPAA records. Application developers need to be trained about incorporating security into applications which process HIPAA records. and so on…

      You have to segregate people in various groups based on their job roles and train them on best practices.

      Few cents from me.


    • #33028
      Don Donzal
    • #33029

      The keywords when it comes to HIPAA is reasonable and appropriate.  If it is not reasonable to train a temporary employee that only stays with you for one day then training shouldn’t be a requirement for those employees.

      When an employee is given the test is there an acknowledgment form that is signed by them and returned to HR or the security office?  You may want to consider creating a 1 page document that simply covers Compliance, Security and Privacy in very general terms (Ex. employees should not… based on XYZ Policy) and have temp employees read and sign that form for documentation purposes so that you can prove that you are doing your due diligence if it came to that.

    • #33030

      HIPAA requires employees to be trained based on their job role. Even if you employee is temporary employee. Based on the job role of the person, you will ask them to take necessary training. If you want them to take the basic training, you can ask them to do the Certified HIPAA Privacy Associate (CHPA) training http://hipaatraining.net/hipaa-certification/certified-hipaa-privacy-associate-chpa.htm  which includes HIPAA security overview. If you want them to have comprehensive HIPAA security training then you want them to go through the Certified HIPAA Security Expert (CHSE) http://hipaatraining.net/hipaa-certification/certified-hipaa-Security-Expert-chse.htm 

      All consultants or companies providing temp staff are the business associate of covered entity. All BA have to comply with the HIPAA regulation. If you have temporary employee, they are still part of your organization and your organization will be responsible if there is HIPAA violation caused due to their action. The key is that the person has to be trained based on their job role.

      If you are covered entity, download this questionnaire of  HIPAA compliance status of the business associates. This helps you to ensure that BA meets the HIPAA standards.  http://www.compliancehome.com/whitepapers/HIPAA/abstract11982.html

      Feel free to ask if you have any other questions.

    • #33031

      I worked for a hospital for about 5 months. I took HIPAA training. Online test. I think you can probably go through a vendor who already has this training set up and then have you be the admin of the course… see everyones scores/retakes/create accounts etc.

    • #174659
      Karen Blake

      Very informative.

    • #178582

      I have had not had to have my employees do the training. I dont think its necessary for them. Bellingham painting contractor

Viewing 9 reply threads
  • You must be logged in to reply to this topic.

Copyright ©2021 Caendra, Inc.

Contact Us

Thoughts, suggestions, issues? Send us an email, and we'll get back to you.


Sign in with Caendra

Forgot password?Sign up

Forgot your details?