HIPAA & Security Required by law

HIPAA Training for Dental and Medical Offices

The HIPAA Privacy Rule in plain language: what your team may say, to whom, and what patients can ask for. Seven core lessons plus one lesson written for each person’s job, finished in about 95 minutes, with a certificate your auditor can check.

See pricing and buy See the lessons

Certificate of completion. Not continuing-education (CE) credit.

At a glance

8 lessons · about 95 min: Short lessons. Progress saves as they go.
From $25 a person: Card fees included. Volume pricing.
English and Spanish: Every lesson and quiz, in either language. Each learner chooses.
Verifiable certificate: Certificate of completion. Not continuing-education (CE) credit.
Last reviewed October 4, 2026: We update this page when the rules change.

Before you buy: what’s included, and what your office adds

How it works: self-paced online lessons with short videos and a quiz after each lesson. There is no live class or instructor. Learners can send a question to our trainers from any lesson (we answer within 2 business days) or call (916) 770-4050, Monday to Friday, 8am to 6pm Pacific. Each person who passes gets a dated certificate of completion. It is not continuing-education (CE) credit.

HIPAA requires training on your office’s own privacy policies and procedures (45 CFR §164.530(b)). Our lessons teach the rules every practice shares. Your office still gives staff its own policies and Notice of Privacy Practices, and tells them who the Privacy Officer is. If you don’t have written policies yet, our HIPAA Compliance Pack includes them.

Audience

Who it’s for

Everyone on a dental, medical or specialty practice team: front desk, billing, assistants, hygienists, providers and managers.
Practices that need documented privacy training for new hires, and a yearly refresher for everyone else.
Staff who already took HIPAA Security Awareness and now need the privacy half.

The law

What HIPAA actually requires

Under 45 CFR §164.530(b), a covered entity must train every member of its workforce on its privacy policies and procedures, as needed for their job. New staff must be trained within a reasonable time after they join, and staff must be retrained when a material change in the policies affects their work.

The rule also requires you to document that the training happened (§164.530(b)(2)) and keep that documentation for six years (§164.530(j)(2)). That record is what an auditor or investigator asks to see.

How often? The Privacy Rule does not set a fixed yearly schedule. Many practices retrain everyone every year so the records stay current and nobody falls through the cracks; our plans run yearly for that reason.

Sources checked October 4, 2026

45 CFR §164.530 (eCFR)

The lessons

What’s covered

8 lessons · about 95 min. Each lesson ends with a short quiz.

#	Lesson	Minutes
1	HIPAA Privacy: What You May Share, and What Patients Can Ask For	14
2	The Notice of Privacy Practices: The Promise Your Practice Made	11
3	Minimum Necessary: How Much Is Too Much to Share	11
4	Records, Amendments and Restrictions: The Deadlines You Have to Meet	12
5	Business Associates: The Vendors Who Hold Your Patients' Data	12
6	Breach or Not: How That Decision Actually Gets Made	11
7	When You May Share Without Asking: Police, Family, Courts and Public Health	12
8	Plus one lesson for the person’s roleEach person takes the lesson for their job: Front Desk and Patient Intake, Insurance, Claims and Billing, Clinical Staff, Assistants and the Exam Room, Providers, Clinicians and Prescribers, Office Managers and HIPAA Security Officers, Outside Labs, Imaging and Digital Workflow, Sterile Processing, Supplies and Deliveries	13–16
	Total	about 95 min

Certificates

A dated certificate anyone can verify

Dated, with a serial number

Each person who passes gets a certificate showing their name, practice, program, lessons completed, score and date. Lessons end with a short quiz; the pass mark is 80%.

Anyone can check it

An auditor, inspector or employer can confirm a certificate is genuine at hipaa.comodotechnology.com/verify, with no account and without contacting us.

Not CE credit

It is a certificate of completion: proof the training happened. It is not continuing-education credit and not an accreditation or license.

Price

Price and how to buy

Choose a plan on our pricing page, enter your headcount and pay online. Card fees are included. Yearly plans renew each year until you cancel, and you see and agree to those terms before you pay. Replacing someone who leaves costs nothing.

HIPAA & Security plan

$39 / person / year

Both HIPAA programs and every role lesson, for 1–9 people. $35 at 10–24, $32 at 25–49, $29 at 50–99, $25 at 100+.

This program on its own

$25 / person / year

For staff who already hold the other HIPAA certificate. Choose the program after you sign in.

Complete plan

$99 / person / year

All 23 programs. $89 at 10–24 people, $79 at 25+. Also in the $1,199 HIPAA Compliance Pack (documents plus a first year of training for up to 10 staff).

See pricing and buy Certificate of completion. Not continuing-education (CE) credit.

FAQ

Common questions

Is HIPAA training required every year?

Not by a fixed date in the rule. HIPAA requires training for new staff within a reasonable time, retraining when your policies change in a way that affects someone’s job, and documentation you keep for six years. Most practices choose a yearly refresher because it is the simplest way to keep every record current.

Is this HIPAA training made for dental offices?

Yes. The examples come from dental and medical front desks, operatories and billing offices. Each person also gets one lesson for their role, such as front desk, billing, clinical staff, providers or office managers.

How long does it take?

About 95 minutes in total: seven core lessons and one role lesson, each 11 to 16 minutes. Progress saves, so staff can finish between patients.

What proof do we get?

Each person who passes gets a dated certificate with a serial number. Anyone can confirm it online at the verify page, without an account. It is a certificate of completion, not continuing-education (CE) credit.

Do we also need HIPAA Security Awareness?

Most practices do. HIPAA Awareness covers the Privacy Rule (§164.530(b)); HIPAA Security Awareness covers the Security Rule’s training standard (§164.308(a)(5)). The HIPAA & Security plan includes both from $39 a person per year.

Is it available in Spanish?

Yes. Every lesson and quiz is available in English and Spanish, and each learner can choose.

Related programs