HIPAA Privacy & Security Compliance for Nonprofits

About this course

“This course contains the use of artificial intelligence.”Nonprofit employees who handle health information face real legal obligations under HIPAA, yet most organizations provide little to no training on what the law actually requires. This course closes that gap with clear, practical instruction tailored specifically to the nonprofit environment.You'll start with the foundation — what HIPAA is, who it applies to, and how to determine your organization's role as a Covered Entity or Business Associate. From there, you'll learn to identify Protected Health Information in all its forms, including electronic, paper, and verbal PHI, so you always know what requires protection.The course walks you through the Privacy Rule in plain language, covering when you can use or disclose patient information, when written authorization is required, and how special restrictions apply to mental health and substance abuse records. You'll also master the Security Rule, including the administrative, physical, and technical safeguards your organization must maintain to protect electronic health data.Practical lessons on cybersecurity threats, phishing, ransomware, and social engineering give you the real-world skills to protect your organization every day. You'll learn what to do when a breach occurs, how breach notification timelines work, and what HIPAA requires when working with outside vendors through Business Associate Agreements.The course wraps up with enforcement realities — civil penalties reaching into the millions and criminal penalties including prison time — so you understand exactly what's at stake. Whether you work in program delivery, administration, billing, IT, or leadership at a nonprofit, this course gives you everything you need to handle patient information correctly, confidently, and in full compliance with federal law.