HIPAA for Leadership & Compliance Oversight Training

AI authoring tools for easy customization
Additional languages available
Meets accessibility standards
Auto-save training, mobile-friendly
Deliver on Ethena or your LMS (SCORM)

Course Summary

HIPAA compliance starts at the top, where leaders own the decisions that keep protected health information safe. This Ethena course gives executives and compliance officers a practical guide to overseeing programs, accepting risk, and meeting their oversight duties.

HIPAA legal landscape and oversight duties
Risk analysis and risk acceptance accountability
Breach notification decisions and timelines
Business associate oversight and verification

Included Modules:

Introduction

Introduces the course and explains why executives and compliance officers carry personal accountability for HIPAA oversight, decisions, and protecting health information.

HIPAA Legal Landscape

Covers the Privacy, Security, and Breach Notification Rules, plus HITECH and Omnibus amendments that define how leaders must protect health information.

Compliance Program Oversight & Sanctions

Explains how leaders build, document, and enforce a HIPAA compliance program, including consistent sanctions for workforce members who violate policies.

Risk Analysis & Risk Acceptance Accountability

Shows how executives review enterprise risk analyses, weigh remediation options, and own the accountability for any security risks they formally accept.

Breach Notification Decision-Making

Guides leaders through the four-factor risk assessment, notification thresholds, and the deadlines for telling individuals, HHS, and the media after a breach.

Business Associate Oversight & Annual Verification

Explains how leaders vet vendors, sign and maintain business associate agreements, and review the safeguards each partner uses to protect health data.

HIPAA Violations & Penalties

Reviews the four tiers of civil penalties, criminal liability, and corrective action plans that follow HIPAA violations and OCR enforcement.

Spearphishing for Executives

Teaches leaders to spot targeted spearphishing and business email compromise attacks that exploit their authority to access systems and health data.

Included Mini-Courses:

California Consumer Privacy Act (CCPA) Training

GDPR Training

Generative AI Training

Data Minimization and Storage Limitation Training

Australian Privacy Principles Training

Why is data privacy training important?

HIPAA puts protected health information under tight rules, and leaders are the ones accountable when those rules break down across a team or an entire organization. When oversight is weak, mishandled patient records, sloppy access controls, or a slow breach response can trigger regulatory penalties, investigations, and lasting damage to patient trust. This training helps leaders and compliance staff set the policies, safeguards, and reporting habits that keep PHI protected and the organization ready for an audit. Get it right and you build a culture where people handle sensitive health data carefully every day, not just when someone’s watching.

"Ethena helped us embed clear standards directly into how we operate and grow. That's what designing for trust at scale actually looks like."

Jacob Leon Beier Chief Compliance Officer & Counsel, TriMark USA

"I needed to train 500 people on side agreements in two weeks. Ethena made it happen — custom content, quick turnaround, no drama."

Darryl Cyphers, Jr. Senior Director of Legal Compliance, Klaviyo

"Making a custom training used to take hours. Now, it's as easy as uploading a PDF, and everything comes to you fully formatted. I was blown away."

Giovanna Travieso Lead-People Experiences & Growth, Magic Leap