This course helps organizations meet the workforce training and security awareness requirements of the HIPAA Privacy and Security Rules. It is not legal advice. Certificates show completion of DoctorConnect's HIPAA training; they are not a government certification, and no government agency certifies HIPAA training or individuals. Images on this page show sample data, not real people.
HIPAA training for employees
HIPAA training your team will actually finish
25 short, illustrated lessons built around real situations, a quiz that proves people learned it, and an official certificate for every employee. Reminders, renewals and audit-ready records are handled for you. $5 per employee, per year.
Everything HIPAA training needs, in one place
Built to cover the workforce training and security awareness requirements in 45 CFR 164.530(b) and 164.308(a)(5).
25 illustrated lessons
Each lesson covers one situation that causes real HIPAA problems, from texting and screenshots to AI tools and phishing, with a picture, do and don't lists and a real-world example.
A quiz that proves it
One question per lesson, drawn from four versions of each, so retakes get fresh questions. 80% passes, and retakes do not hand out the answers.
Signed acknowledgment
Every employee reads and e-signs your workforce HIPAA rules. The typed name, date, time and course version are recorded with their training.
Official certificate
A numbered certificate goes to each employee and to your admins as a PDF the moment they pass. Anyone can confirm it online with its code.
Reminders and renewals
People get reminders before their due date and weekly while overdue. Renewal opens automatically a month before each certificate expires.
Monthly security reminders
A short security tip lands in every inbox each month, such as spotting phishing or checking a screenshot, so awareness does not stop after the course.
Audit-ready records
A records report, CSV export, written training program and activity log are ready whenever an auditor or client asks. Records are kept at least six years.
Works on any device
Employees sign in with a personal link, with no app and no password to forget, and can stop and pick up where they left off on a phone or computer.
A certificate worth framing
Every employee who passes gets an official certificate of completion. It shows their quiz score, the dates it is valid, the course version and a verification code, so your clients and auditors can check it is real.
- Numbered and verifiable online with its own code
- Emailed as a PDF to the employee and to your admins
- Valid for one year, with renewal handled automatically
- Shows the quiz score and the exact course version taken
- Printable, and kept in your records for six years
Lessons people read in minutes, not videos they sit through
Each lesson is a short page with an illustration, plain-language rules and a real example. Most people finish the whole course in about 40 minutes and can come back to the printable handbook any time.
- HIPAA basics: what PHI is, business associates, minimum necessary
- The rules: Privacy, Security and Breach Notification, safeguards and patients' rights
- Access: snooping, passwords, two-factor codes and verifying callers
- Sharing safely: email, texting, screenshots, reminders, AI tools and vendors
- Devices and threats: phishing, ransomware, lost devices, remote work and disposal
- When things go wrong: reporting, what counts as a breach and penalties
A quiz that measures learning, not luck
Every answer gets instant feedback the first time through, so the quiz teaches as it tests. We also check our question bank so the right answer cannot be guessed by picking the longest one.
- 120 questions: four versions of every topic
- Each attempt uses the versions a person has seen least
- 80% to pass, with unlimited retakes
- Retakes show which lesson to review, not the answer
- Missed answers are explained after a pass
See your whole team at a glance
Your dashboard shows who is certified, who is in progress and who is overdue. Add people by pasting a list, and deactivate them when they leave without losing their records.
- Status, progress and due dates for every employee
- Printable training records report for audits
- CSV export and a written training program document
- Activity log of every sign-in, attempt and signature
- Admin sign-in protected by a password and an authenticator code
Tailored to your business
Use the course as it is, or have us shape it around how your team actually works.
Your policies
We build your written HIPAA policies and your Security Official's name into the lessons and the acknowledgment each employee signs.
Your specialty
Dental, behavioral health, chiropractic, optometry or a health tech vendor: examples are rewritten around the situations your staff really face.
Your systems
Lessons can name the software, devices and channels your team uses every day, so the rules are concrete instead of generic.
Your roles
Add extra lessons and questions for the people who need them, like front desk, billing or IT. Our own engineers take five extra technical lessons.
Your brand
Put your organization's name on the course and certificates, so the training feels like your own program.
Real people
The course is built and supported by DoctorConnect, which has worked with medical practices and patient data since 2009.
Simple pricing
HIPAA Training
$5 per employee, per year
The complete course, certificates and records for your whole team.
- 25 illustrated lessons
- Quiz with 120-question bank
- Signed acknowledgment
- Verifiable certificate for each employee
- Reminders and yearly renewal
- Monthly security reminders
- Admin dashboard and audit records
Tailored Program
Custom quote
Everything in HIPAA Training, shaped around your business.
- Your policies and Security Official
- Examples from your specialty
- Your software and devices named
- Extra lessons for specific roles
- Your name on the course and certificates
How it works
No software to install and nothing for your staff to set up.
-
Send us your team list
Names and email addresses are all we need. Mark anyone in IT or with server access for the technical track.
-
Everyone gets a personal link
Each person receives an email with their own sign-in link. It works on a phone, tablet or computer.
-
They learn, pass and sign
Lessons, quiz and acknowledgment take about 40 minutes, and progress saves along the way.
-
Certificates arrive automatically
The employee and your admins get the certificate by email, and renewal reminders arrive each year.
HIPAA training questions
Is there an official HIPAA certification for employees?
No. No government agency certifies HIPAA training or individuals, and HHS does not accredit training companies. HIPAA requires that your workforce is trained and that you keep records of it. Our certificate documents that an employee completed the course, passed the quiz and signed your HIPAA rules.
Who needs HIPAA training?
Everyone in your workforce who may come across patient information: employees, temps, interns and contractors working under your direction. Covered entities such as medical practices must train their workforce, and both practices and their business associates must run security awareness training.
How often do employees need HIPAA training?
HIPAA requires training for new workforce members within a reasonable time and again when your policies change, plus ongoing security reminders. Most organizations and many client contracts expect yearly training, which is why our certificates last one year and renewals open automatically.
Does HIPAA training have to come from an accredited provider?
No. HIPAA does not require an accredited or certified training provider. What matters is that the training covers your policies and the risks your staff face, and that you can show who completed it and when. Our records report and CSV export are built for exactly that.
How much does this HIPAA training cost?
$5 per employee, per year. That covers the full course, the quiz, the signed acknowledgment, a certificate for each employee, reminders, renewals, monthly security tips and your admin records. A tailored program built around your own policies and specialty is quoted separately.
How long does the HIPAA training take?
Most employees finish in about 40 minutes: 25 short lessons, a 25-question quiz and a one-page acknowledgment. Progress saves as they go, so they can split it across breaks on a phone or computer. Technical staff take five extra lessons and questions.
What topics does the course cover?
PHI and de-identification, business associates, minimum necessary, the Privacy, Security and Breach Notification Rules, patients' rights, passwords and two-factor sign-in, email, texting, screenshots, appointment reminders, AI tools, vendors, phishing, ransomware, lost devices, remote work, disposal, incident reporting, breaches and penalties.
Can the training be tailored to our practice?
Yes. We can build in your written policies and Security Official, rewrite examples around your specialty and software, add lessons for specific roles, and put your name on the course and certificates. Tell us what you need and we will quote it.
What records do we get for an audit?
A dashboard of every employee's status, a printable training records report, a CSV export, a written training program document and an activity log. Each completion records the lessons viewed, every quiz attempt, the signed acknowledgment and the course version. Records are kept at least six years.
Do you need access to our patient data?
No. The training only needs each employee's name and email address. No patient information goes into the training system, so there is nothing about your patients for us to protect, share or lose, and the training service itself does not need a Business Associate Agreement.
Is this only for medical practices?
No. It suits any organization that handles patient information: medical, dental, behavioral health, chiropractic and optometry practices, billing companies, and health tech vendors working as business associates. We built it first for our own team at DoctorConnect, a business associate ourselves.
What happens if someone fails the quiz?
They can review the lessons and retake it as many times as they need. Each retake uses different questions, and missed questions point to the lesson to review rather than revealing the answer. Once they pass, the answers they missed are explained.
Get your team HIPAA trained
Tell us how many people you have and whether you want the course as it is or tailored, and we will get you set up.
Get your team started