For individual learners
- Practical HIPAA Security Rule and PHI handling coverage
- 20-question quiz with 80% passing threshold
- Retest support and certificate validation
HIPAA / PHI security
Annual HIPAA security training built for healthcare teams.
Run individual staff training, prepaid access-code programs, completion reporting, and certificate validation from one focused workflow.
One focused workflow
Training, quiz, certificate, and reporting.
For organizations
- Prepaid team access codes
- Staff intake links and completion reporting
- Optional certificate logo support
Team rollout
Set up HIPAA training for staff or business associates.
Organizations can request annual HIPAA packages, completion reporting, and prepaid access-code setup without standing up a separate learning system.
Built for annual workforce training
20 questions. One audit-ready certificate.
Designed for healthcare teams, covered entities, and business associates that need a repeatable annual HIPAA and security-awareness training workflow for employees and consultants.
What the certification covers
- PHI definitions, Business Associate Agreements, minimum necessary standards, patient rights, breach response, and individual accountability.
- Password management, suspicious sign-in monitoring, malicious software response, security updates, and workstation security for unattended devices.
- CMIA consent and deadlines, CCPA scope, phishing, impersonation, and pretexting calls that create day-to-day privacy and security exposure.
How the learner flow works
- The employee enters their details, company, and manager contact information.
- After payment, the learner unlocks training materials and takes a 20-question assessment.
- Passing requires 16 of 20 correct (80%) and issues a certificate with manager visibility and renewal support.
Regulatory anchors
Built on the rules you're being audited against
Every question is tagged with the regulatory citation it covers so customers can produce an audit-ready coverage report.
- US HIPAA Privacy and Security Rules (45 CFR Parts 160, 162, and 164).
- California Medical Information Act (CMIA) where applicable.
- CCPA training-relevant items where applicable.
- Common social-engineering risks (phishing, impersonation, pretexting).
Sources & references
Where the quiz content comes from
Canonical materials referenced when building this workflow. Open in a new tab.
Certificate validation
Passing learners receive a certificate with a verification code. Public validation remains available for active certificates.