US federalRequired by law45 CFR §164.530(b) (training)

HIPAA privacy rule essentials

A ready-made course you customise for your organisation, with a live session deck and two surveys. You only add the 7 details that are specific to your organisation.

See the live deckSee the full outline
Try the coursePreview the survey
Length
35 min
Lessons
7 lessons
Frequency
New workforce members within a reasonable time after
Last reviewed
8 Oct 2026
Case practice
What would you do?

Hospital unit clerk gets a call from "the patient's daughter" asking for test results

Try it: this is one of 15 interactive activities in the course.

What's included

Three pieces that work together

Copy once, get everything. Learners prepare on their own, you answer questions live, and the surveys tell you what stuck.

Self-paced course

Short lessons with real workplace scenarios, not walls of text.

  • 7 lessons, about 35 minutes
  • 2 video slots (you add the videos)
  • Accordion, process, scenario, tabs and quizzes
  • 12-question final check, 80% to pass

Live session deck

An AhaSlides presentation to run after the course, in person or online.

  • 11 slides
  • Quiz, word cloud, poll, scale slides
  • A closing slide for your contacts

Two surveys

Find out what landed, and whether people use it on the job.

  • Post-course feedback, about 2 minutes
  • 30-day check-in
  • Anonymous by default
  • Results feed your next refresher

Learning objectives

At the end of this course, learners can

Built to the law Each objective names the requirement it comes from and the lesson that covers it.

IDObjectiveRequired byWhere it's covered
TO 1.0Achieve ≥ 80% on the final assessment-Whole course
LO 47.1.1Explain why HIPAA exists and the consequences of violations§164.530(b); HITECHLesson 1: Why privacy matters
LO 47.2.1Identify PHI, covered entities and business associates§160.103Lesson 2: What's covered
LO 47.3.1Decide when PHI may be used or disclosed: TPO, authorization, opportunity to agree, required by law§§164.502-512Lesson 3: Allowed or not?
LO 47.4.1Apply the minimum necessary standard and verify identity before disclosing§164.502(b), §164.514(h)Lesson 4: Everyday safeguards
LO 47.5.1Support patient rights: notice, access, amendment, accounting, restrictions§§164.520-528Lesson 5: Case practice
LO 47.6.1Report a suspected privacy incident or breach immediately + your info§164.530(e), (f); §164.400 ffLesson 6: Escalate correctly

Your part: what a template can't do for you

  • Your workplace details: fill in the 7 highlighted fields so the course describes your own policies, contacts and locations.
  • Records: record completion in your own LMS or record system.

Course outline

7 lessons, about 35 minutes

Minutes per lesson are an estimate, shared out by page count.

ContentInteractiveVideoYou customise
1

Why privacy matters

3 pages

7 min
Before you beginNoteList
The curious coworkerKey factVideo
ConsequencesAccordionQuiz
2

What's covered

2 pages

4 min
Key termsTabs
Is it PHI?FlashcardsQuiz
3

Allowed or not?

3 pages

6 min
Uses & disclosuresProcess
Sort itSorting activity
Minimum necessaryTableNoteQuiz
4

Everyday safeguards

3 pages

6 min
Front-desk & hallway habitsChecklistImage
Patient rightsAccordionYour info
CheckMulti-select quiz
5

Case practice

2 pages

4 min
Scenario 1Scenario
Scenario 2ScenarioQuiz
6

Escalate correctly

2 pages

4 min
Report itProcessYour infoKey fact
CheckQuiz
7

Final assessment

Assessment

4 min
Final check12 questions80% to passCompletion page

Live deck and surveys

11 slides to run live, two surveys to close the loop

Pink slides are interactive. Both surveys are anonymous; pink questions are written for this course.

TitleTitle + agenda
Word cloudWhat counts as PHI?
QuizA coworker is your patient - can you peek at her chart to see how she's doing?
PollWhere do privacy slips happen most here?
QuizDeadline to act on a patient's access request?
Content · customiseOur privacy officer + report path
QuizMinimum necessary applies to…
ScaleHow confident are you verifying a caller's identity?
Open-endedOne habit we should change
Q&AAsk the trainer anything
ClosingWho to contact, and where to find more
Post-course feedback: 11 questions, about 2 min
  1. Overall rating 5 stars
  2. Relevant, realistic, right length, helpful activities agree/disagree grid
  3. What was most useful? multi-select
  4. Confidence before this course, and now 1-5 scale
  5. How confident are you handling… grid
  6. Which scenario felt most like your job? multiple choice
  7. What privacy question do you still have? short text
  8. Our workspace makes it easy to protect patient privacy (screens, private spaces, shredding). 1-5 scale
  9. One thing we should change or add open text
  10. Would you recommend this course? NPS
30-day check-in
  1. Have you used what you learned since the course? multiple choice
  2. How confident are you today? Compare with day 1 1-5 scale
  3. Do you know where to find our privacy officer and how to report a privacy incident? yes / no / not sure
  4. A moment where the training helped, or where you weren't sure open text
  5. Which topics should the next refresher focus on? ranking

Results show whether people use the training on the job, not just whether they finished it.

Make it yours

7 fields to fill in, and you're ready

Everything else is done. These are the details only your organisation knows; each one is highlighted inside the course.

  • Privacy officer contact{{PRIVACY_OFFICER_CONTACT}}
  • Records request process{{RECORDS_REQUEST_PROCESS}}
  • Used in Lesson 5 scenario{{CALLER_VERIFICATION_PROCEDURE}}
  • Stricter state rules{{STATE_PRIVACY_LAW_NOTES}}
  • Sanctions policy{{SANCTIONS_POLICY}}
  • LMS or record system{{LMS_OR_RECORD_SYSTEM}}
Show all 7 fields
  • Survey URL{{SURVEY_URL}}

FAQ

Common questions

Can I run HIPAA privacy rule essentials training online?

The course itself is self-paced and online, and the live deck lets you add a live session. Whether online delivery meets your local rules depends on the law that applies to you, so check 45 CFR §164.530(b) (training) or ask your own counsel.

How often is this training needed?

New workforce members within a reasonable time after joining; when policies materially change; documented (kept 6 years). Annual refresher = industry best practice.

Who needs this training?

All workforce members of covered entities and business associates (front desk, nurses, billing, volunteers, students).

What records should I keep?

Record completion in your own LMS or record system, so you can show who finished the course and when. Check the retention period that applies to you in 45 CFR §164.530(b) (training).

Can I edit the content?

Yes, everything. Change the wording, swap scenarios for ones from your workplace, add your logo, or remove parts that don't apply. Keep anything your own law requires you to cover.

Related templates

Often taught together

All Healthcare templates →
US federalRequired by law

HIPAA security awareness

All workforce members · Healthcare

30 min
US federalRequired by law

Medicare fraud, waste & abuse (FWA)

Employees · Healthcare

35 min
US federal

Infection control & standard precautions

Clinical and support staff · Healthcare

40 min
US multi-stateRequired by law

Elder & dependent adult abuse - Mandated reporting

Mandated reporters · Healthcare

35 min
Last reviewed: 8 October 2026Based on: 45 CFR §164.530(b) (training); §164.502 (uses & disclosures, minimum necessary), §164.506, §164.508, §164.510, §164.512,…Templates are a starting point, not legal advice.

Ready to run it?

Open the live deck to see how the session runs alongside the course and both surveys.

See the live deck