About This Course
Medical information can reach public safety personnel through a records request, a hospital handoff, an emergency call, or an electronic message. This course examines the decisions involved, from establishing the reason for a request to protecting information after it has been received.
Receiving hospital information does not, by itself, make a police agency a HIPAA covered entity. The lessons distinguish ordinary investigative duties from qualifying healthcare functions. They also explain why other laws, restrictions attached to records, and agency procedures may affect how information is used.
Learners review how to prepare focused requests, recognize limits on disclosure, and identify questions that need a supervisor, privacy officer, or legal adviser. The course also addresses the practical handling of sensitive information in recordings, reports, dispatch systems, and approved digital tools.
Course at a Glance
- Delivery: Online, self-paced learning.
- Course material: 112 slides organized into six modules.
- Course duration: 2 hours 12 minutes.
- Practice cases: 19 fictional scenarios, including a final integrated case.
- Learning activities: Illustrated explanations, reflection pauses, and guided case debriefs.
- Assessment: A separate assessment after the lessons and case activities.
- Exam attempts: Unlimited.
- Completion record: Certificate of Achievement after successful completion of the course requirements.
- Certificate validity: Two years from course completion.
Who This Course Is For
This course is intended for personnel whose assignments involve requesting, receiving, recording, or sharing medical information.
Relevant roles include police officers and investigators, sheriff’s personnel, fire and EMS responders, correctional and transport staff, dispatchers, records personnel, and school or campus safety staff.
Supervisors and training coordinators may also find it useful when reviewing information-handling expectations with their teams. Course selection should reflect the learner’s actual duties and the organization’s training requirements.
What the Six Modules Cover
Module 1: Foundations and Roles
Explore how HIPAA applies to different functions and personnel with more than one role. Topics include protected health information and the differences between legal permission, a legal duty, and agency policy.
Module 2: Medical Information Requests
Learn how to word requests clearly and check identity and authority. Review authorizations, minimum necessary requirements and exceptions, court orders, court-ordered warrants, subpoenas, administrative requests, and other disclosure routes.
Module 3: Emergencies and Investigations
Examine information sharing involving serious and imminent threats, abuse reporting, suspicious deaths, emergency response, responder exposure, and behavioral health information. Review the distinction between releasing existing test results and collecting a new biological sample.
Module 4: Custody and Handoffs
Compare the information needs and legal requirements for treatment, safe transport, and investigations. Topics include verified receiving contacts, destination changes, and review of later records requests after lawful custody ends.
Module 5: Responsible Information Handling
Review information handling in dispatch entries, electronic messages, interagency sharing, vendor arrangements, and body camera recordings. Explore AI privacy and accuracy checks, incident reporting, and preservation of relevant records.
Module 6: Additional Protections and Review
Recognize protections for qualifying substance use disorder records under 42 CFR Part 2, including restrictions on their use or disclosure in proceedings against a patient. Review FERPA, state confidentiality requirements, and locally approved agency guidance.
Practice the Decisions Behind a Request
The fictional cases ask learners to examine the facts before choosing a next step. Reflection pauses provide time to consider a response, followed by guided debriefs explaining the relevant limits and review needs.
Examples include:
- A missing adult: An officer requests identifying details along with a complete psychiatric history. Learners consider which parts of the request may fit a limited disclosure route and which need a separate legal basis.
- A request after jail release: An officer seeks records of new treatment based only on an earlier booking. The case examines why the person’s current custody status and the basis for the new request matter.
- An attachment sent to the wrong person: An employee uses an approved email system but selects the wrong recipient. Learners identify what to report promptly and how to support the response without spreading the information further.
Throughout the cases, learners use five checks: source, purpose, authority, scope, and safeguards. These checks help them identify missing facts, document decisions, and determine when another reviewer should be involved.
Assessment and Completion
After reviewing the lessons and case activities, learners complete a separate assessment with unlimited exam attempts. Learners who meet the course requirements receive a Certificate of Achievement, valid for two years from course completion.
The certificate documents training completion. It does not authorize access to medical records or establish organizational HIPAA compliance. Apply the course material together with approved agency procedures and any additional instruction required for your assignment.
Reviews
There are no reviews yet.