HIPAA Training is an Annual Mandatory Requirement for all Travis County Employees


starDirect link to Annual HIPAA Trainingstar



  • For NEW Travis County employees, HIPAA training needs to be taken within the first 30 days of employment.
  • HIPAA training is a federal requirement enforced and regulated by Health and Human Services, Office of Civil Rights.
  • Policy 1.6 Education and Training states, if you are non-compliant with your HIPAA training, access may be restricted from electronic forms of protected health information (PHI) that reside on the Travis County network.

Harriet hippo

 

Consequences for Delinquent HIPAA Training

  • Mandatory training delinquency causes Travis County to be non-compliant with the Federal HIPAA Privacy Rule, which could cause penalties, fines, and sanctions to Travis County.
    • Penalties for HIPAA violations can be issued by the Department of Health and Human Services’ Office for Civil Rights (OCR) and State Attorneys General.

Who, What, Where

HIPPA Training Regulation

  • § 164.530(b)(1) Training – A covered entity must train all members of its workforce on the policies and procedures with respect to protected health information (PHI) required by this subpart and subpart D, as necessary and appropriate for the members of the workforce to carry out their functions within the covered entity.
  • § 164.530(b)(2)(i) Training – A covered entity must provide training that meets the requirements of paragraph (b)(1) of this section, as follows: (A) To each member of the covered entity’s workforce by no later than the compliance date for the covered entity; (B) Thereafter, to each new member of the workforce within a reasonable period of time after the person joins the covered entity’s workforce; and (C) To each member of the covered entity’s workforce whose functions are affected by a material change in the policies or procedures required by this subpart or subpart D of this part, within a reasonable period of time after the material change becomes effective in accordance with paragraph (i) of this section, (ii) A covered entity must document that the training as described in paragraph (b)(2)(i) of this section has been provided, as required by paragraph (j) of this section.

Corrective Action

Takeaways

  • TAKE THE REQUIRED HIPAA TRAINING AT LEAST ONCE A YEAR!
  • DELINQUENT TRAINING = BIGGER FINE!

If you would like general information about HIPAA, click to view the HIPAA page. Or, if you would like information regarding Travis County’s HIPAA Policies, or to report a suspected privacy concern, contact the Travis County Compliance and Privacy Officer