HIPAA Training

The Health Insurance Portability and Accountability Act (HIPAA) of 1996 is a U.S. federal law designed to protect sensitive patient health information from being disclosed without the patient's consent or knowledge. It establishes national standards for the protection of certain health information, known as Protected Health Information (PHI).

HIPAA training covers:

  • Individually Identifiable Information
    Health information including demographic information, that identifies the individual or with respect to which there is a reasonable basis to believe the information can be used to identify the individual.
  • Protected Health Information
    Individually identifiable health information that is transmitted by electronic media or transmitted or maintained in any other form or medium.
  • De-Identified Information
    Information that has certain identifiers removed in accordance with 45 CFR 164.514; no longer considered to be Protected Health Information. It is important to note that voice recordings are considered identifiers. If you plan to audio record interviews for transcription, even if you plan to destroy the source, these recordings are considered identifiable.

Information and education focused on the HIPAA is provided by the Howard University Office of Audit and Compliance and the Office of Regulatory Research Compliance.

To better streamline the Health Insurance Portability and Accountability Act (HIPAA) training procedures, the Office of Regulatory Research Compliance (ORRC) and the Institutional Compliance Office have reached the following agreement. Henceforth, Clinician Scientists and Research Staff should only complete the Clinician Scientist module of the Collaborative Institutional Training Initiative (CITI) Program. A certificate of successful completion of this module is considered sufficient to meet the HIPAA training requirements of the ORRC and the Institutional Compliance Office. The certification is good for 2 years.

HIPAA Requirement Harmonization