HIPAA Security Training

This topic contains 7 replies, has 8 voices, and was last updated by  DelimitingCharacter 4 years, 4 months ago.

  • Author
    Posts
  • #5226
     Dengar13 
    Participant

    OK folks, here is my dilemma:  we have a requirement to have employees take a HIPAA security test for HIPAA training and am not sure how it applies to temporary employees.  One scenario that was brought to me was what if there is a temporary employee who works for one day, a couple of days or one week; do they need to take this training?  HIPAA guidelines are not very clear and concise in my opinion. 

    I just want to make sure that we are covered and fulfill the HIPAA requirements for security training.  Has anyone been in this situation before?

    Thanks all!

  • #33025
     ziggy_567 
    Participant

    I don’t know if it is applicable to the private sector, but when I was  in the National Guard, the only people that had to be HIPAA certified were the one handling HIPAA protected information. We basically had only senior enlisted and officers go through the training.

  • #33026
     yatz 
    Participant

    My company does HIPAA-related stuff but I’ve never had to be certified for anything.  Maybe this is something that needs investigating…

  • #33027
     vekarman 
    Participant

    I have also not heard of any HIPAA training. But following are my views on such trainings.

    All regulations like HIPAA, SarbOx, PCI-DSS etc are based on Best Practices in relevant industries. You can organize a formal training about user awareness for the employees who are handling and processing HIPAA records and infrastructure also. I understand majority of the people in a company who are HIPAA compliant will be desktop operators who are accessing HIPAA records. They should be trained about the best practices like password protection, clear screen policy etc.. You might be having some IT infra people who are maintaining hardware and network processing HIPAA records. They should be trained about the security of the hardware and network from leaking of HIPAA records. Application developers need to be trained about incorporating security into applications which process HIPAA records. and so on…

    You have to segregate people in various groups based on their job roles and train them on best practices.

    Few cents from me.

    Kishore

  • #33028
     Don Donzal 
    Keymaster
  • #33029
     tux633k 
    Participant

    The keywords when it comes to HIPAA is reasonable and appropriate.  If it is not reasonable to train a temporary employee that only stays with you for one day then training shouldn’t be a requirement for those employees.

    When an employee is given the test is there an acknowledgment form that is signed by them and returned to HR or the security office?  You may want to consider creating a 1 page document that simply covers Compliance, Security and Privacy in very general terms (Ex. employees should not… based on XYZ Policy) and have temp employees read and sign that form for documentation purposes so that you can prove that you are doing your due diligence if it came to that.

  • #33030
     Compliance 
    Participant

    HIPAA requires employees to be trained based on their job role. Even if you employee is temporary employee. Based on the job role of the person, you will ask them to take necessary training. If you want them to take the basic training, you can ask them to do the Certified HIPAA Privacy Associate (CHPA) training http://hipaatraining.net/hipaa-certification/certified-hipaa-privacy-associate-chpa.htm  which includes HIPAA security overview. If you want them to have comprehensive HIPAA security training then you want them to go through the Certified HIPAA Security Expert (CHSE) http://hipaatraining.net/hipaa-certification/certified-hipaa-Security-Expert-chse.htm 

    All consultants or companies providing temp staff are the business associate of covered entity. All BA have to comply with the HIPAA regulation. If you have temporary employee, they are still part of your organization and your organization will be responsible if there is HIPAA violation caused due to their action. The key is that the person has to be trained based on their job role.

    If you are covered entity, download this questionnaire of  HIPAA compliance status of the business associates. This helps you to ensure that BA meets the HIPAA standards.  http://www.compliancehome.com/whitepapers/HIPAA/abstract11982.html

    Feel free to ask if you have any other questions.

  • #33031
     DelimitingCharacter 
    Participant

    I worked for a hospital for about 5 months. I took HIPAA training. Online test. I think you can probably go through a vendor who already has this training set up and then have you be the admin of the course… see everyones scores/retakes/create accounts etc.

You must be logged in to reply to this topic.

Copyright ©2019 Caendra, Inc.

Contact Us

Thoughts, suggestions, issues? Send us an email, and we'll get back to you.

Sending

Sign in with Caendra

Forgot password?Sign up

Forgot your details?