HIPAA Privacy and Security Rules (Online CE Course)

(based on 8,632 customer ratings)

Authors: Debbie Sabatino, Julia Clendenin, BS, and Paul Fekete, MD FCAP
Reviewers: Laurie Bjerklie, MA, MLS(ASCP)CM and Stephanie Mihane, MLS(ASCP)CM

This course, using examples specific to the clinical laboratory, covers the HIPAA privacy regulations and treatment of protected health information (PHI) in a succinct manner. Content is directed at laboratory staff, from desk personnel to phlebotomists to medical technologists. Includes numerous interactive case studies. Appropriate for annual HIPAA training for laboratory staff. Key areas covered include technical and physical safeguards, minimum necessary standard, administrative requirements, and authorization.

See all available courses

Continuing Education Credits

P.A.C.E.® Contact Hours (acceptable for AMT, ASCP, and state recertification): 2 hour(s)
Approved through 11/30/2024
Florida Board of Clinical Laboratory Personnel Credit Hours - Supervision/Administration, Quality Control/Quality Assurance, and Safety: 2 hour(s)
Approved through 11/30/2024

Objectives

  • Define HIPAA.
  • Define "covered entities" and "business associates" and list which individuals, groups, or organizations are included in each category.
  • Explain what is meant by protected health information, who is authorized to view this information, and what safeguards are in place to prevent unauthorized access.
  • Apply HIPAA privacy and security requirements to your daily clinical responsibilities.

Customer Ratings

(based on 8,632 customer ratings)

Course Outline

Click on the links below to preview selected pages from this course.
  • Overview of HIPAA
      • What is HIPAA?
      • What Information is Protected?
      • Covered Entities
      • Business Associates
      • All of the following are considered protected health information except for:
      • Which of the following individuals, organizations, or agencies are covered by HIPAA?
      • All of the following are examples of HIPAA-regulated business associates except for:
      • HIPAA Rules and Acts
  • HIPAA Privacy Rule
    • Privacy Rule Introduction
    • Patients' Rights
      • Patients' Rights Under HIPAA
      • Notice of Privacy Practices
      • Case Study: Accessing PHI You are answering the office phone. A person claiming to be a patient whose voice you do not recognize calls demanding all ...
    • Privacy Rule Safeguards
      • Privacy Rule Safeguards
      • Physical Safeguards
      • Administrative Safeguards
      • Technical Safeguards
      • Case Study: Incidental Disclosures and Safeguards As a manager, you guided a group of students through your clinical laboratory. You did not explain t...
    • Use and Disclosure of PHI
      • Patient Authorization
      • Limiting Use and Disclosure of PHI
      • Case Study: AuthorizationYou are working in a physician's office. The doctor orders laboratory and other diagnostic tests on a patient with suspected ...
      • Case Study: Limiting Use and Disclosure of PHI You are a customer service representative in a clinical laboratory. A nurse at one of your outreach cli...
      • Minimum Necessary Use and Disclosure
      • Case Study: Minimum Necessary Use and Disclosure You are a ward clerk responsible for inserting laboratory reports into a patient's medical records. Y...
      • Case Study: Minimum Necessary Use and Disclosure You are a phlebotomist at a specimen collection center. A patient arrives with orders for a blood gl...
      • De-Identified Health Information
      • Case Study: De-identified Health InformationYou work in a laboratory microbiology department that provides a local nursing home with information about...
  • HIPAA Security Rule
  • HITECH Act
      • What is the HITECH Act?
      • Filing a HIPAA Violation
      • HIPAA Violation Penalties
      • Increased Business Associate Liability
      • HIPAA Breach Notification Rule
  • Omnibus Rule
  • Conclusion
      • HIPAA Discretions as a Result of COVID-19
      • Follow your Facilities' Policies and Procedures
  • References
      • References

Additional Information

Intended Audience: All healthcare personnel
Level of Instruction: Basic 
Authors' Information:
Debbie Sabatino has over 20 years of progressive technical, operational, business development, and risk management experience in healthcare. Currently, she is the Senior Manager, Enterprise Risk at McMaster University. Previously, she was Director, Privacy for MDS Laboratory Services, which includes Canadian and US Operations. As a privacy expert for the organization, Ms. Sabatino is responsible for developing, implementing, and ensuring the ongoing success of the Laboratory Services privacy program and the company’s global privacy approach. Debbie is a member of the International Association of Privacy Officers (IAPO) and the Conference Board of Canada Chief Privacy Officers Council.
Julia Clendenin is a content and graphics developer for MediaLab. She graduated from Georgia Institute of Technology with a B.S. in Biochemistry and a B.S. in Literature, Media, and Communication. 
Paul Fekete, MD, is the founder of MediaLab. He was formerly an Assistant Professor of Pathology at Emory University and the Director of Laboratories for Gwinnett Health System near Atlanta. Dr. Fekete has extensive experience teaching and is the author of numerous journal articles and several book chapters. He additionally has extensive experience in instructional design.
Reviewer Information
Laurie Bjerklie, MA, MLS(ASCP)CM, is an Education Developer for MediaLab and LabCE. She earned a B.S. in Medical Laboratory Science from the University of North Dakota and an M.A. in Curriculum and Instruction from Saint Xavier University. She has over 15 years of experience in higher education and has held program director and faculty positions in both MLT and MLS programs.
Stephanie Mihane, MLS(ASCP)CM, is a retired laboratory professional with over 35 years of experience as a generalist.  She also worked as the Point-of-Care Coordinator for 15 years at Kaiser Permanente-Colorado Region.  Stephanie also served on Region VIII's ASCLS Board of Directors from 2019 until 2022.

080520_Clendenin_HIPAA_NEW


090120_Clendenin_HIPAA_Business


081920_Clendenin_HIPAA_Privacy_2


081320_Clendenin_HIPAA_CovEnt_NEW


081020_Clendenin_HIPAA_Physical_NEW