Guided course

HIPAA Level 1 Essentials

Practical introductory training for recognizing and protecting PHI and ePHI, making safer everyday decisions, and reporting privacy or security concerns. This course supports workforce awareness and is not legal advice or a substitute for organization-specific policies.

Estimated duration

24 min

Course structure

8 modules

Lessons

8 lessons

Outcomes

What learners should be ready to do.

Recognize PHI and ePHI in common work situations.

Choose safer actions for access, communication, screens, paper, and devices.

Report suspected privacy or security concerns promptly and factually.

Inside the course

Review the lesson structure.

Open a preview lesson to see how the course is paced. The remaining lessons unlock after purchase or active membership access.

1

Orientation

Preview

3 min video lesson

Curriculum

Built as a guided training path.

Complete each module lesson and its required knowledge check to unlock the next module. Learners who have already passed the course can freely review every module.

Module 1

Orientation

1 lesson

Learn how the course works, use Pause. Check. Protect. Report., and practice immediate feedback.

Module objectives

Use the Pause, Check, Protect, Report decision habit.
Recognize how short scenarios, practical rules, and immediate feedback work together.
Choose a safer action and explain why it reduces privacy or security risk.

Orientation

3 min

Preview

Open preview

Module 2

HIPAA scope and role boundaries

Locked

Understand what HIPAA protects, who has duties, and where your responsibility begins and ends.

Module objectives

Recognize when HIPAA applies to the work context.
Connect privacy, security, and breach concepts to everyday actions.
Route questions that exceed your role.

HIPAA scope and role boundaries

3 min

Locked

Module 3

Recognize PHI and ePHI

Locked

Before you can protect information, you have to spot it in ordinary work.

Module objectives

Recognize identifiers and health-related information together.
Spot PHI in spoken, paper, and electronic formats.
Treat uncertainty as a reason to protect and verify.

Recognize PHI and ePHI

3 min

Locked

Module 4

Access, use, and disclosure

Locked

Connect every action with PHI to a legitimate job purpose.

Module objectives

Connect access to an assigned job task.
Limit information to the purpose of the work.
Stop curiosity access and informal favors.

Access, use, and disclosure

3 min

Locked

Module 5

Protect PHI in daily work

Locked

Use reasonable safeguards for conversations, screens, paper, messages, and mobile work.

Module objectives

Protect verbal PHI in shared and public spaces.
Secure screens, devices, paper, and remote work.
Use approved communication and social-media practices.

Protect PHI in daily work

3 min

Locked

Module 6

Requests, family, and individual rights

Locked

Be helpful without making a disclosure decision outside your role.

Module objectives

Verify requesters through the approved process.
Handle family and caregiver questions without automatic disclosure or automatic refusal.
Recognize rights-related requests and route them promptly.

Requests, family, and individual rights

3 min

Locked

Module 7

Security awareness and approved technology

Locked

Protect ePHI by recognizing suspicious activity and avoiding unapproved tools.

Module objectives

Recognize phishing and suspicious system activity.
Protect credentials, devices, and accounts.
Use only approved tools for PHI and ePHI.

Security awareness and approved technology

3 min

Locked

Module 8

Report incidents and recognize stricter rules

Locked

Report early, preserve facts, and escalate sensitive or unusual situations.

Module objectives

Recognize privacy and security events that need review.
Report facts without deleting evidence or promising outcomes.
Escalate state-law and special-record red flags.

Report incidents and recognize stricter rules

3 min

Locked