HIPAA training is required for workforce members who handle protected health information, and the obligation reaches further than most organizations assume. It covers business associates and their staff, not only clinical employees, which is why couriers, transport staff and contracted service providers regularly fall inside it.
These courses cover the workforce training obligation and the specific handling duties that apply to people moving specimens and records between sites. Staff with reasonably anticipated exposure to blood or other potentially infectious materials also need bloodborne pathogens training, which is a separate OSHA requirement with a genuine annual cycle.
Courses in HIPAA & Healthcare
Also commonly needed by these teams
Common questions
Who counts as a workforce member for HIPAA training?
The category is broader than employees. It generally covers people whose conduct is under the direct control of the covered entity or business associate, including volunteers and trainees, whether or not they are paid. Organizations that train only clinical staff usually have a gap in transport, administrative and contracted roles.
Do medical couriers need different training from office staff?
They face handling situations office staff do not, including chain of custody, vehicle security, specimen integrity and incidents that occur away from any facility. We publish a separate courier course for that reason rather than sending everyone through the general workforce version.
Is bloodborne pathogens training part of HIPAA?
No, they are unrelated obligations that often apply to the same person. HIPAA protects health information. Bloodborne pathogens is an OSHA standard protecting workers from exposure to blood and other potentially infectious materials, and it carries its own annual training requirement and its own written exposure control plan.
How often does HIPAA training need to be repeated?
Training is required for new workforce members within a reasonable time after joining, and again when a material change in policies or procedures affects their role. Many organizations run an annual refresher as policy, because turnover and policy changes make an event-driven cycle difficult to evidence.