← All courses

Awareness · Healthcare privacy

HIPAA Awareness

Help your team understand its responsibilities for health information.

Introduce protected health information, the HIPAA Privacy and Security Rules, and the importance of an appropriate response when something goes wrong.

Secure payment by Stripe · for yourself or for your team

Standard and editionHIPAA (45 CFR Parts 160 and 164)

Last updated28 September 2026

Preview this course

Experience the learning
before you enrol.

Watch a sample from HIPAA Awareness before you enrol.

HIPAA AwarenessSample

Learning outcomes

Knowledge you can put to work.

Connect the subject to the responsibilities and decisions people encounter in their roles.

  • Understand what protected health information means.
  • Recognise the purpose of the Privacy and Security Rules.
  • Understand the importance of reporting potential issues through the appropriate channels.

Part of: Privacy and Data Protection Training

Inside the course

A clear path through the essentials.

20 modules, 20 practice checkpoints and a final exam. Video runtimes are approximate; allow additional time for the practice questions and the final exam.

Part 1Module 1Approx. 10 min
  1. Why HIPAA matters to you10 min
  2. Practice: Why HIPAA matters to you3 questions
Part 2Module 2Approx. 6 min
  1. What counts as PHI6 min
  2. Practice: What counts as PHI3 questions
Part 3Module 3Approx. 7 min
  1. Using and sharing PHI: the Privacy Rule at work7 min
  2. Practice: Using and sharing PHI: the Privacy Rule at work3 questions
Part 4Module 4Approx. 6 min
  1. Only what your job needs: minimum necessary and snooping6 min
  2. Practice: Only what your job needs: minimum necessary and snooping3 questions
Part 5Module 5Approx. 6 min
  1. Patients' rights, and how you help6 min
  2. Practice: Patients' rights, and how you help3 questions
Part 6Module 6Approx. 8 min
  1. The Security Rule in plain words8 min
  2. Practice: The Security Rule in plain words3 questions
Part 7Module 7Approx. 9 min
  1. Your daily safeguards9 min
  2. Practice: Your daily safeguards3 questions
Part 8Module 8Approx. 8 min
  1. Incidents and breaches: report at once8 min
  2. Practice: Incidents and breaches: report at once3 questions
Part 9Module 9Approx. 7 min
  1. Business associates, subcontractors and offshore teams7 min
  2. Practice: Business associates, subcontractors and offshore teams3 questions
Part 10Module 10Approx. 8 min
  1. A day at the front desk: calls, ID checks and what others overhear8 min
  2. Practice: A day at the front desk: calls, ID checks and what others overhear3 questions
Part 11Module 11Approx. 8 min
  1. Family, friends, the media and social media: what you may say, and to whom8 min
  2. Practice: Family, friends, the media and social media: what you may say, and to whom3 questions
Part 12Module 12Approx. 8 min
  1. Sending PHI safely: e-mail, text, fax, print and the cloud8 min
  2. Practice: Sending PHI safely: e-mail, text, fax, print and the cloud3 questions
Part 13Module 13Approx. 8 min
  1. Ransomware and phishing in healthcare: when an attack becomes a breach8 min
  2. Practice: Ransomware and phishing in healthcare: when an attack becomes a breach3 questions
Part 14Module 14Approx. 8 min
  1. A day in an offshore delivery team8 min
  2. Practice: A day in an offshore delivery team3 questions
Part 15Module 15Approx. 7 min
  1. Enforcement, what is changing, and your part7 min
  2. Practice: Enforcement, what is changing, and your part3 questions
Part 16Module 16Approx. 8 min
  1. The notice of privacy practices and authorisations in practice8 min
  2. Practice: The notice of privacy practices and authorisations in practice3 questions
Part 17Module 17Approx. 8 min
  1. The risk analysis: how it is done8 min
  2. Practice: The risk analysis: how it is done3 questions
Part 18Module 18Approx. 8 min
  1. Breach or not? The four-factor assessment and the notification clock8 min
  2. Practice: Breach or not? The four-factor assessment and the notification clock3 questions
Part 19Module 19Approx. 8 min
  1. Business associate agreements8 min
  2. Practice: Business associate agreements3 questions
Part 20Module 20Approx. 8 min
  1. Ready for an OCR investigation8 min
  2. Practice: Ready for an OCR investigation3 questions

Frequently asked questions

Your questions,
answered.

About HIPAA Awareness, its certificate and enrolment.

Ask Sterling
Who is HIPAA Awareness training for?

It is for teams that work with protected health information, including staff of healthcare organisations and of service providers that handle health information for them, such as BPO, IT and administrative support teams. No legal or clinical background is needed. The course helps every team member understand their responsibilities for health information in daily work.

What does the HIPAA Awareness course cover?

The course introduces protected health information, the purpose of the HIPAA Privacy and Security Rules, and the importance of an appropriate response when something goes wrong. Learners come away understanding what protected health information means, why the two Rules exist, and why potential issues must be reported promptly through the appropriate channels in their organisation.

How long does the HIPAA Awareness course take?

HIPAA Awareness is a set of short video modules followed by practice questions and a final exam. The course page shows the current number of modules and the approximate video runtime; allow additional time for the practice questions and the exam. With 12 months of access, you can complete it in one sitting or spread it over several sessions.

Do learners receive a certificate?

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for HIPAA Awareness. Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. It is a training certificate for the individual learner.

Is the course online and self-paced?

Yes. HIPAA Awareness is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

Can we enrol a team, and how much does it cost?

HIPAA Awareness is US$19 per learner. Teams save 20% for 11 to 50 learners and 30% for 51 to 200 learners; 201 or more learners are priced on request. Client administrators can track their team's progress. Prices are in US dollars, excluding taxes, and Sterling confirms final pricing and enrolment.

Does completing the course make our organisation HIPAA compliant?

No. The Certificate of Completion is a training certificate: it shows that one person completed HIPAA Awareness and reached the pass mark in its final exam. It is not certification of an organisation to any standard, and Sterling does not certify organisations. Completing the course does not show that an organisation complies with HIPAA; it builds the awareness of individual team members.

Which HIPAA rules does the course introduce?

HIPAA Awareness introduces the HIPAA Privacy Rule and the HIPAA Security Rule, explaining the purpose of each at awareness level, together with what protected health information means. It also stresses what each person should do when something goes wrong: report potential issues through the appropriate channels in their organisation rather than trying to handle them alone.

Assessment & completion

Complete the learning.
Keep a verifiable record.

Learners who complete the course and its final exam receive a numbered Sterling Academy Certificate of Completion with online QR verification.

This records course completion. It does not confer ISO certification or a professional auditor qualification.

Pass mark
70%
Prerequisites
None
Training records
Supports the HIPAA Security Rule standard for security awareness and training (45 CFR 164.308(a)(5)), with a dated record of who completed the training and their final exam result.
Ask about course requirements

Your next step

Ready to implement HIPAA?

Expert and experienced consultants, 8,100+ client engagements in 60+ countries, from gap assessment to a system ready for its certification audit.

Talk to a Sterling consultant

Not sure which course?

Plan your next step
in learning.

Discuss your learning needs