HIPAA Training FAQs
Do I need to enroll in HIPAA training?
All members of the Stanford University workforce who perform work (paid or unpaid), study, or do research in a department within the Stanford University HIPAA Components (SUHC) are required to complete the "HIPAA/Protecting Patient Privacy" training within thirty (30) days of joining Stanford and annually thereafter. The training is completed through the Stanford University STARS training system. SUHC Workforce members include faculty, staff, students, postdocs, volunteers, as well as visitors who may have either direct or indirect access to patients/research participants or their health information. Contact your supervisor or the Stanford University Privacy Office by making a Service Request if you have any questions about enrollment.
Who should take the HIPAA Research Module?
All members of the Stanford University Workforce, whether salaried or non-salaried, who perform human subjects research within the Stanford University HIPAA components (SUHC) are required to complete an additional HIPAA training, “HIPAA Privacy For Researchers," training within thirty (30) days of joining Stanford and annually thereafter. SUHC Workforce members who must complete the research training module include:
- Protocol directors, research investigators and their support staff who submit new, modified, exempt IRB protocols, or work with patients or patient information
- Any research staff who come into direct contact with a research subject or his/her PHI. This includes graduate students, post-doctoral fellows, clinical research coordinators, data entry specialists, statisticians, and laboratory personnel
Contact your supervisor or the Stanford University Privacy Office by making a Service Request if you have any questions about enrollment.
How often do I need to take HIPAA training?
SUHC Workforce members receive HIPAA training within thirty (30) days of joining Stanford. In addition, SUHC Workforce members must renew their HIPAA training annually after joining Stanford or sooner if Federal or State laws and regulations change. The University implements an annual renewal period every year during the fall (October - December). Even if you completed the HIPAA training during the calendar year, you will need to complete the training again during the fall renewal period for compliance purposes.
How do I enroll in HIPAA training?
The HIPAA training modules are available in STARS. You can search "HIPAA/Protecting Patient Privacy" in the STARS catalog or use the following link to enroll in the course.
To access the "HIPAA Privacy For Researchers" course use this link to enroll.
I completed my HIPAA training, how do I obtain a certificate of completion?
After you complete the training in STARS you will receive an email confirming your completion. You can print a certificate of completion from your All Learning page in STARS. Go to your training history in STARS and click on the print icon located to the far right of the training title to print you certificate.
If you completed your training in Healthstream, please send an email to firstname.lastname@example.org and request your certificate of completion.