Each year, we get numerous questions regarding HIPAA privacy and security and the obligations it creates for plan sponsors to protect their plan participants’ Protected Health Information (PHI). We plan to expand this Murphy Mini into a Murphy Mega to do a more robust training on the HIPAA privacy and security requirements as they apply to the plan sponsor. Some of the topics covered include:

• What does and does not constitute PHI
• What constitutes electronic PHI
• Permitted uses of PHI
• The required safeguards for PHI and ePHI
• Complying with the Minimum Necessary Standard
• And so much more!

This presentation can be used as a foundational resource to support the development of your HIPAA privacy and security training. It’s intended to be built upon and customized to reflect your organization’s specific policies and procedures. Please note that on its own, this presentation alone does not fulfill HIPAA’s training requirements, as compliance also requires training the necessary individuals on your organization’s specific policies and procedures.