Log InRegisterVISIT NRHP.ORG

Reporting And Data

HIPAA

Latest Update: May 19, 2023
PROVIDE FEEDBACK

Training Information

The HIPAA Security Rule establishes national standards to protect individuals' electronic personal health information that is created, received, used, or maintained by a covered entity. The Security Rule requires appropriate administrative, physical and technical safeguards to ensure the confidentiality, integrity, and security of electronic protected health information.

Responsible Party

Who Must Complete Training?
All hospital staff.

Deadlines

When Do I Need to Complete?
Upon hire (orientation) and when changes occur.

Authority

The legal mandate requiring reporting
45 CFR 164.530(b)(1)

(1) Standard: Training. A covered entity must train all members of its workforce on the policies and procedures with respect to protected health information required by this subpart and subpart D of this part, as necessary and appropriate for the members of the workforce to carry out their functions within the covered entity.

(2) Implementation specifications: Training.

(i) A covered entity must provide training that meets the requirements of paragraph (b)(1) of this section, as follows:

(A) To each member of the covered entity's workforce by no later than the compliance date for the covered entity;

(B) Thereafter, to each new member of the workforce within a reasonable period of time after the person joins the covered entity's workforce; and

(C) To each member of the covered entity's workforce whose functions are affected by a material change in the policies or procedures required by this subpart or subpart D of this part, within a reasonable period of time after the material change becomes effective in accordance with paragraph (i) of this section.

(ii) A covered entity must document that the training as described in paragraph (b)(2)(i) of this section has been provided, as required by paragraph (j) of this section.

DISCLAIMER
Although many of these requirements apply to individual medical professionals and other types of hospitals and health care facilities, the information is presented solely to support Critical Access Hospitals. The reporting requirements and legal mandates on this site are not an exhaustive list and Nevada Rural Hospital Partners, Inc. bears no responsibility or liability for any hospitals' or providers' failure to comply with Federal or State laws or regulations.