Online Learning

• Duration: 18 Minutes

The number of resolution agreements released were noticeably down in Q2. However, that does not mean that the HHS OCR is not doing investigations and compliance audits. They are doing many! Q2 just had fewer resolution agreement finalized in Q2 than in the past several other quarters.

• Duration: 15 Minutes

HIPAA penalties continue to be applied not only for HIPAA Security Rule and Privacy Rule noncompliance discovered after breaches have occurred, but more are being applied for HIPAA non-compliance in situations where breaches were not involved. Non-compliance penalties have been given for not following requirements in the Privacy Rule, Security Rule and Breach Notification Rule. In Q1 of 2021 all but one of the non-compliance penalties were applied against entities for violation of the HIPAA Privacy Rule's right of access standard. These entities ranged from small clinics to a large health insurer that experienced a multi-year breach affecting over 9.3 million people. Multi-year corrective actions and multi-million-dollar penalties were applied by the HHS OCR for violating multiple Privacy Rule, Security Rule and Breach Notification Rule requirements. See and hear a summary of all the penalties and required actions the HHS OCR gave in Q1 2021 in this free video from Privacy & Security Brainiacs. For more information and resources on HIPAA visit https://privacysecuritybrainiacs.com/.

• Duration: 12 Minutes

HIPAA penalties continue to be applied not only for HIPAA Security Rule and Privacy Rule noncompliance discovered after breaches have occurred, but more are being applied for HIPAA non- compliance. As more complaints are received by the HHS OCR for non-compliance with the HIPAA requirements for allowing individuals access to their associated health data, those non-compliance penalties are also becoming more commonly applied, and associated fines are being leveled against not just large organizations, but every organization size from the largest down to one-person providers and insurers who do not follow the requirements for providing in a timely manner copies of PHI to the applicable requestors. This free video provides an overview of the penalties applied in Q4 2020.

• Duration: 7 Minutes

This free training video provides a quick overview of what protected health information, or PHI, is and its importance in maintaining HIPAA compliance.

• Duration: 13 Minutes

The Department of Health and Human Services (HHS) Office of Civil Rights (OCR) applied ten HIPAA fines with penalties against covered entities (CEs) and business associates (BAs) in Q3, 2020. This training provides details including the organizations receiving the penalties, the amounts of the penalties, the types of incidents that resulted in the penalties, and the specific protected health information (PHI) items that were involved. It also provides the total number of penalties applied since HIPAA went into effect, the most common non-compliance issues involved with al those penalties, and the total value of all HIPAA penalties applied up through the end of September, 2020.

• Duration: 9 Minutes

This brief overview of the HIPAA Security Rule grants students an understanding on what the Security Rule is and how it is applied in real life, including information on the different types of safeguards, implementation specifications, and the need for risk analyses.

• Duration: 5 Minutes

The HIPAA Privacy Rule gives individuals important rights with respect to their protected health information and is instrumental in protecting individuals’ privacy and their PHI. This quick training video gives an overview of the nature and importance of the Privacy Rule.

• Duration: 11 Minutes

If you have anyone from your organization working from home, or any other remote location, occasionally or on a long-term basis, you must be aware of the related information security and privacy risks and how to mitigate them. With what may be the majority of office workers throughout the world now working from home, cybercrooks, business competitors, and nation-state hackers are actively exploiting the vulnerabilities that are present in most home and remote offices. This training video covers one of the ways that those cyber spies get into your home: through IOT devices.

• Duration: 5 Minutes

This free training course designed for business associates provides a quick overview of the basic requirements that BAs are required to adhere to in order in order to maintain compliance with HIPAA. Covered topics include Security Rule requirements, Privacy Rule requirements, breach response requirements, and penalties and sanctions.