You have been given the responsibility of providing privacy training to new HIM staff when one is hired. The staff should receive privacy awareness training as part of the hospital's new employee orientation.

Your training plan for the HIM Department staff is as follows:

$$ Timing of training: Within $3$ working days of beginning work in the HIM Department Training should be completed within $30$ days of employee's first day in the HIM Department

$$ Trainer: Assistant Director HIM or designee

$$ Method: Computer$-$ assisted training and traditional classroom time

$$ Handouts: None

$$ Records: Signature of trainees

$$ Retention of training records: Forever in employee file

$$ Testing: None

$$ Included in training: All HIM Staff

$$ Content of training:

o Requesters should provide photo ID and written authorization

o Employees should not access charts that they do not have a business reason to access

o Transcribed reports only should be sent to the physician listed on the report

o There should be enough of an overview of functions of department so the employee knows to whom to refer to when questions arise or requests arise

o Employees should log out of the computer when they leave

o Passwords should not be shared

o Physicians do not get access to PHI unless there is a treatment, payment or healthcare operations $($TPO$)$ reason

o Hospital and departmental privacy policies are maintained by the secretary and are maintained in each functional area of the department for easy access

o Privacy problems in the department can be reported to your supervisor or the chief privacy officer

o PHI should only be released by authorized staff

$1.$ What do you think of the content of the new employee training? Justify your response

$2.$ What areas are of concern to you and how can they be improved? $($Remember to review your HIPAA regulations$)$