HIPAA Workforce Training Requirements
Enforced by: HHS OCR (US)
Current as of March 26, 2013
Plain Language Summary
All workforce members must receive HIPAA privacy training. New employees need it promptly after joining. Document who was trained and when — OCR investigators will ask.
A covered entity must train all members of its workforce on the policies and procedures with respect to protected health information as necessary and appropriate for the members of the workforce to carry out their functions. Training must be provided: to each new member of the workforce within a reasonable period of time after joining; and to each member of the workforce whose functions are affected by a material change in policies within a reasonable period of time after the material change becomes effective.