2026 - eCompliance Series - HIPAA Training for Medical Offices-HIPAA Employee Training

Video Transcription

Video Summary

This HIPAA compliance training reviews the Privacy, Security, and related HIPAA rules and how they apply to covered entities (providers, plans, clearinghouses) and business associates, requiring business associate agreements. It explains administrative simplification: standardized electronic transactions, code sets (ICD, CPT/HCPCS), and identifiers (EIN, NPI). The Privacy Rule protects PHI and limits disclosures, emphasizing patient rights (access, amendments, accounting of disclosures) and the need for a Notice of Privacy Practices, identity verification, and timely responses. It notes the reproductive health privacy rule (April 2024) was largely vacated in June 2025, while Part 2 substance use disorder confidentiality changes remain, requiring NPP updates by Feb. 16, 2026. The Security Rule requires administrative, physical, and technical safeguards (access controls, audit logs, integrity, authentication, transmission security). Proposed 2025 Security Rule updates include mandatory specifications, stronger risk analysis, inventories, network maps, annual audits, and documentation. The Breach Notification Rule, reporting timelines, enforcement, penalties, sanctions, and the importance of documented workforce training are emphasized.

Keywords

HIPAA Privacy Rule

HIPAA Security Rule safeguards

Business associate agreements (BAA)

Protected Health Information (PHI) patient rights

Administrative simplification electronic transactions and code sets

Breach Notification Rule reporting timelines