HIPAA Awareness for Law Enforcement & Public Safety Professionals

Course Overview

• Delivery: Online, self-paced learning.
• Course material: 112 slides across six modules.
• Course duration: 2 hours 12 minutes.
• Practice exercises: 19 fictional case scenarios, including a final integrated exercise.
• Learning approach: Illustrated explanations, reflection pauses, and guided case debriefs.
• Completion requirements: Course lessons and a separate assessment.
• Exam attempts: Unlimited.
• Completion record: Certificate of Achievement after successfully meeting the course requirements.
• Certificate validity: Two years from course completion.

Course Outline

Module 1: Foundations and Roles

Establish who holds the information and which responsibilities apply to each person involved. The module introduces protected health information, different record types, family involvement, and personal representatives. It also separates legal permission from legal duties and agency procedures.

Module 2: Medical Information Requests

Follow a request from initial contact through verification and review. Topics include authorizations, the minimum necessary standard and its exceptions, court orders, court-ordered warrants, subpoenas, and administrative requests. Learners also examine directory inquiries, missing-person requests, crime-victim information, and required reports.

Module 3: Emergencies and Investigations

Consider the facts that affect information sharing during urgent situations and criminal investigations. Examples address abuse reports, serious threats, suspicious deaths, crimes in healthcare settings, and emergency crime alerts. The module also covers behavioral health information, psychotherapy notes, welfare checks, responder exposure, and the distinction between existing test results and a request for a new biological sample.

Module 4: Custody and Handoffs

Examine how information should reach the people responsible for care, transport, and custody. Cases address different recipient needs, changed destinations, confirmation of receiving contacts, and conflicting instructions. Learners also consider why requests for later treatment records require fresh review after lawful custody ends.

Module 5: Responsible Information Handling

Review what happens after information has been received, including forwarding, recording, storage, vendor use, and public release. Lessons address dispatch entries, business associate relationships, body cameras, AI tools, and transcript accuracy. The module also explains incident reporting, evidence preservation, accountability, documentation, and retention.

Module 6: Additional Protections and Review

Recognize records that may require additional review under 42 CFR Part 2, FERPA, or state confidentiality requirements. Particular attention is given to restrictions on using Part 2 records in proceedings against a patient. The final lessons explain how to use agency guidance that has been completed and approved locally. The module also includes an integrated case exercise and a final review before the separate assessment.

Learning Outcomes

The course prepares participants to:

• Explain a medical information request clearly and identify the process needed for review.
• Recognize when an emergency, investigation, or custody situation requires a specific disclosure analysis.
• Match the requested information to the recipient’s responsibilities.
• Identify confidentiality restrictions that may continue when records change hands.
• Respond appropriately to mistaken disclosures, questionable access, or inaccurate AI-generated content.
• Record relevant decisions and direct unresolved questions to the appropriate agency or healthcare contact.