HIPAA and security training your staff will actually finish — and your auditor can actually verify.
Short lessons written for the way a practice really runs. Everyone who passes gets a dated certificate with a serial number anyone can check online. That record is what HIPAA actually asks you to keep, and it is the thing most training providers do not give you.
Comodo Technology is a Sacramento managed IT provider. We have supported California healthcare practices through real incidents, and this training is written from that experience rather than from a template.
- 23 programs, 201 video lessons
- HIPAA, OSHA, California harassment, billing and more, in English and Spanish.
- About 10–15 minutes a lesson
- Done between patients. Progress saves as they go.
- Assigned by role
- Front desk, billing, clinical, providers, managers, lab, sterile processing.
- Publicly verifiable certificates
- Serial number, program, lessons completed, date. Check any real certificate number on our certificates page.
- State law included
- California CMIA and Texas HB 300, not just federal HIPAA.
Start with HIPAA: two programs. Take one, or both.
They answer two different questions. HIPAA Security Awareness is about protecting the systems — §164.308(a)(5). HIPAA Awareness is about what you may say, to whom, and what patients can demand of you — §164.530(b). Most practices need both. If you already hold a HIPAA certificate from somewhere else, buy the security half on its own.
HIPAA Security Awareness Training
9 lessons each · about 110 minutes · 8 questions per lesson
- Phishing and email threats in a healthcare practice
- Passwords, logins and multi-factor authentication
- The phone call that is not what it seems
- Protecting patient information day to day
- Workstations, devices and the office itself
- Working outside the office: home, telehealth, personal devices
- Email, text, voicemail and the patient portal
- When something goes wrong: reporting and response
- Plus their own role lesson
HIPAA Awareness Training
8 lessons each · about 95 minutes · 8 questions per lesson
- What you may share, and what patients can ask for
- The Notice of Privacy Practices: the promise your practice made
- Minimum necessary: how much is too much to share
- Records, amendments and restrictions: the deadlines you must meet
- Business associates: the vendors who hold your patients' data
- Breach or not: how that decision actually gets made
- Police, family, courts and public health
- Plus their own role lesson
Seven role lessons
Front desk · billing and claims · clinical staff and the exam room · providers and prescribers · office managers · outside labs and imaging · sterile processing.
Graded on the server
80% to pass. Questions are shuffled and the answer key never reaches the browser, so a certificate means somebody actually knew the material.
Six-year records
Every completion is kept for the full HIPAA documentation period, and your office manager can export the whole practice to a spreadsheet at any time.
Twenty-three programs, in five groups
HIPAA Awareness and HIPAA Security Awareness (above) are what most practices start with. Every program is live today: buy single programs from $19 to $59 a person, or get all of them with the Complete plan.
Pricing, certificates, state rules and free tools
Pricing
HIPAA + Security from $25 a person. The Complete plan, every program, from $79. Build your plan and pay online.
See pricing
Certificates
Every certificate has a serial number anyone can check. Verify one, or see the four professional certificates.
Verify a certificate
Who we train and your state
Dental, medical, mental health and more. California and Texas add rules on top of HIPAA; see what applies to you.
See who we train
Free tools
Cheat sheet, incident response plan, patient rights, staff acknowledgment and the dental toolkit. No sign-up.
Get the free tools
Four steps, none of them hard
- 1
Tell us your practice name and how many staff
That sets your band. Both programs are included either way.
- 2
We send one join link for your practice
Forward it to everyone. Each person fills in their own name and role — your practice name comes from the link, so it is always right on their certificate and nobody can mistype it.
- 3
They work through it at their own pace
No passwords — they get an emailed sign-in link. Progress saves, so they can stop between patients and come back.
- 4
Your office manager gets the record
Who has finished, who has not, every certificate number, exportable to a spreadsheet. That is the file you hand an auditor or an insurance questionnaire.
Talk to a person
No form that goes nowhere. These reach us.
Comodo managed IT clients: keep using your usual support number for anything IT. This line is for training and HIPAA.