To help CEs and their business associates navigate the confusing world of HIPAA compliance training, we have compiled a simple list of best practices for employee training. We recommend training sessions are offered in shorter, frequent sessions rather than one long session. This way, employees are more likely to stay focused and retain critical information.
Do provide regular training sessions. Each can focus on a different aspect of training, update staff on new developments, or just remind employees of the most important aspects of HIPAA Rules.
Do inform employees of the consequences of a PHI breach. These can include fines and legal action for the CE, privacy violations for patients, and even criminal charges against employees in some situations.
Do include all levels of management in training. Everybody needs a refresher from time to time, and a lack of training provided to higher levels reflects poorly on the CE in an audit.
Don’t forget to document what training is provided, who it is provided to, and which subjects are covered. If OCR carries out an investigation or an audit, this information will need to be provided.
Don’t just read passages from the HIPAA text. Explain legal jargon and summarize important pieces of information. Try to ensure that participants both know the required legislation but also understand how to enact it in their day-to-day roles.
Don’t go too deeply into the history of HIPAA. While it is important to understand why HIPAA was enacted, it is more important employees are aware of the key regulations that directly impact their roles.
Supremus Group LLC has completed activities required for compliance with the privacy rule and has implemented policies and procedures necessary to protect the privacy of our members’ personal health information.https://www.supremusgroup.com/
