Skip to content
Claim this template

Free course template · US federal

HIPAA privacy rule essentials

A ready-made course, live deck and two surveys for all workforce members. AhaSlides tracks progress, completion and scores for you. 35 minutes, 7 lessons, 12-question final check. Last reviewed 8 October 2026; not legal advice.

Claim the templatePreview the courseDownload SCORM for your LMS

Free. No credit card. Edit everything.

Course outline at a glance

  • Explain why HIPAA exists and the consequences of violations
  • Video
  • Accordion
  • Quiz

  • Identify PHI, covered entities and business associates
  • Tabs
  • Flashcards
  • Quiz

  • Decide when PHI may be used or disclosed: TPO, authorization, opportunity to agree, required by law
  • Process
  • Sorting activity
  • Quiz

  • Apply the minimum necessary standard and verify identity before disclosing
  • Checklist
  • Accordion
  • Multi-select quiz

  • Support patient rights: notice, access, amendment, accounting, restrictions
  • Scenario
  • Quiz

  • Report a suspected privacy incident or breach immediately
  • Process
  • Quiz

Final check: 12 questions, 80% to pass

Try some questions from the course

Question 1 of 3

A coworker is also a patient at your clinic. Can you open her chart to see how she is doing?

 

Access must be for a job reason, such as treatment, payment or operations. Looking out of curiosity or concern is not allowed.

Lesson 1, Why privacy matters, teaches this. See the outline

Question 2 of 3

Which of these is a business associate?

 

A business associate is an outside person or company that handles PHI for the covered entity. Volunteers and nurses are workforce members.

Lesson 2, What's covered, teaches this. See the outline

Question 3 of 3

Minimum necessary applies to which of these?

 

It applies to payment and operations, among other uses and disclosures. It does not apply to sharing with another provider for treatment, to the patient themselves or to disclosures under a signed authorization.

Lesson 3, Allowed or not?, teaches this. See the outline

Try next questionClaim the template

Learners earn a certificate

Your organisation

Certificate of completion

This certifies that

Alex Morgan

has completed

HIPAA privacy rule essentials

Completed on12 October 2026
Sample certificate with a placeholder learner name.

Style 1 of 6: Indigo serif

Everyone who finishes gets a certificate with their name, the course title and the completion date. Add your own logo, colours and signer.

Three pieces that work together

Learners prepare on their own, you answer questions live, and the surveys tell you what stuck. 7 fields to fill in with your own policy, contacts and locations; each one is highlighted inside the course.

Claim the template
The HIPAA privacy rule essentials course as a learner first sees it

Completion is tracked for you

Learners sign in to take the course, so every start, finish and score is recorded in AhaSlides. No spreadsheet to keep.

  • Who has finished

    See who has not started, who is in progress and who has completed the course.

  • Every score

    Each learner's result on the 12-question final check, against the 80% pass mark.

  • What landed

    Survey results show what people took away, and the 30-day check-in shows whether they use it.

Claim the template

7 lessons, about 35 minutes

What learners can do at the end of each lesson. Minutes are an estimate.

  • Lesson 1: Why privacy matters · 7 min

    Explain why HIPAA exists and the consequences of violations.

  • Lesson 2: What's covered · 4 min

    Identify PHI, covered entities and business associates.

  • Lesson 3: Allowed or not? · 6 min

    Decide when PHI may be used or disclosed: TPO, authorization, opportunity to agree, required by law.

  • Lesson 4: Everyday safeguards · 6 min

    Apply the minimum necessary standard and verify identity before disclosing.

  • Lesson 5: Case practice · 4 min

    Support patient rights: notice, access, amendment, accounting, restrictions.

  • Lesson 6: Escalate correctly · 4 min

    Report a suspected privacy incident or breach immediately.

  • Lesson 7: Final assessment · 4 min

    12 questions, 80% to pass. The result is saved to the learner's record.

Based on: 45 CFR §164.530(b) (training); §164.502 (uses & disclosures, minimum necessary), §164.506, §164.508, §164.510, §164.512,…

Claim the template

Often taught together

Courses teams often run alongside this one.

Browse all templates (opens in a new tab)

Common questions

Yes. The course, the live deck and both surveys are free. Claiming the template into your AhaSlides account is free too.

The course itself is self-paced and online, and the live deck lets you add a live session. Whether online delivery meets your local rules depends on the law that applies to you, so check 45 CFR §164.530(b) (training) or ask your own counsel.

New workforce members within a reasonable time after joining; when policies materially change; documented (kept 6 years). Annual refresher = industry best practice.

All workforce members of covered entities and business associates (front desk, nurses, billing, volunteers, students).

Record completion in your own LMS or record system, so you can show who finished the course and when. Check the retention period that applies to you in 45 CFR §164.530(b) (training).

Yes, everything. Change the wording, swap scenarios for ones from your workplace, add your logo, or remove parts that don't apply. Keep anything your own law requires you to cover.

Your own details, each highlighted inside the course:
  • Privacy officer contact
  • Records request process
  • Used in Lesson 5 scenario
  • Stricter state rules
  • Sanctions policy
  • LMS or record system
Then edit anything else you like: wording, scenarios, your logo.
Visit the help centre (opens in a new tab)

Ready to run it?

Free. Copy the course, live deck and both surveys into your AhaSlides account in one click.

Claim the template