HIPAA Training FAQ

The HIPAA Hybrid Entity Designation Policy designates West Virginia University as a Hybrid Entity under the Health Insurance Portability and Accountability Act (HIPAA). All schools, departments, clinics, programs, or functions that meet the definition of a covered entity under HIPAA have been designated as University Health Care Component (UHCC). To ensure compliance with HIPAA, the PHI Privacy Policy and PHI Protection Standard require all UHCC Workforce members to complete annual HIPAA training. Training is developed and provided by the WVU HIPAA Privacy and Security Team.

Who has to take this training?

All employees within a named UHCC must complete annual HIPAA training. Students and researchers who access PHI are also required to complete annual training.

• UHCC Workforce members

• WVU Workforce members

• Unpaid interns/students

Where will I complete this training?

Individuals with an employee role, including student employees, will complete the training annually in Infosec IQ, the training system used by Information Technology Services. The enrollment email will come from “Infosec IQ Notifications” with the email address of notifications@notify.wvu.edu.

Students and unpaid interns will continue to complete HIPAA training in SOLE.

Will everyone get the training link at the same time, or is there some kind of sequence?

Training will be required annually in June. All employees will receive an enrollment email from Infosec IQ on the same day with a link unique to them. Use this link to access your training at any time within 30 days. You can go back into Infosec IQ as many times as needed to complete it.

What if I am on medical leave when training enrollment begins?

Employees on medical leave are not required to complete HIPAA training. Supervisors should contact the ITS Service Desk to inform them of employees who may need their HIPAA training deferred until they are back in the office.

I didn’t receive an enrollment email for training. Who do I contact about this?

If you didn’t receive an enrollment email and think you should have, please contact the ITS Service Desk.

I recently completed training and received another enrollment email for the same training. What happened?

If your email address changes, Infosec IQ considers you a ‘new' learner. For example, if your email address changes due to a name change, or the domain changes from @mail.wvu.edu to @hsc.wvu.edu, you would be considered a ‘new' learner and any previous training history won’t be associated with your new email address. Contact the ITS Service Desk to resolve this issue.

I am a new employee and received an email about HIPAA training. Is this legitimate?

Yes. All new UHCC employees will receive an enrollment email within 30 days of their start date and have 30 days to complete the training. Additionally, you will be re-enrolled every June for annual training.