Public Health HIPAA Training Series Modules

These trainings were developed in collaboration with the NC Institute for Public Health at the UNC Gillings School of Global Public Health, with the support of the North Carolina AHEC Program.

• Module 1: HIPAA: An Overview for NC Public Health Professionals
• Module 2: Using and Disclosing Protected Health Information: A Guide for NC Public Health Professionals. This module is in three parts. Click on the links below to access each part.
• Part 1 (Uses and Disclosures, Minimum Necessary Standard, Verification Standard)
• Part 2 (Rules for Using and Disclosing PHI)
• Part 3 (Individual Right of Access)
• Module 3: HIPAA Breach Notification Rule: A Guide for NC Public Health Professionals

HIPAA Training Certification Option

20210317_SOGHIPAA_Cert_2.pdf

Blog Posts by Topic

Disclosures of Communicable Disease Information

• Disclosing Information about Employees with COVID-19, by Jill Moore (April 17, 2020)
• Releasing County-Specific Data about COVID-19, by Jill Moore (April 9, 2020)
• How Will We Know if COVID-19 is in North Carolina? A Look at the State's Communicable Disease Reporting Laws, by Jill Moore (March 2, 2020) 
• Keeping the Public Informed about Communicable Diseases, by Jill Moore (May 26, 2015) 

Disclosures to Law Enforcement

• New Legislation: Disclosing Communicable Disease Information to Law Enforcement to Prevent or Lessen a Serious or Imminent Threat, by Jill Moore (May 13, 2020) 
• Disclosing Information about People with COVID-19 to First Responders, by Jill Moore (March 24, 2020) 
• Resources for Local Health Departments on the New Law Requiring Reports of Juvenile Crime Victims to Law Enforcement, by Jill Moore (November 27, 2019) 
• Reporting Patient Injuries to Law Enforcement: It's Not Just Gunshot Wounds, by Jill Moore (October 2011)

HIPAA Hybrid Entities

• Should a Local Government be a HIPAA Hybrid Entity?, by Aimee Wall (April 2015)

Other Issues

• How Should Health Departments Respond to Requests for Medical Records for the Deferred Action Immigration Program?, by Jill Moore (October 2012)

HIPAA Privacy Rule Summaries and Outlines

Cross-Cutting Issues

• HIPAA Training Requirements: An Overview for NC Local Health Departments, by Jill Moore (May 2018)
• Outline: Personal Representatives
• Outline: Verifying Identity and Authority
• Outline: Minimum Necessary Standard

Disclosing Protected Health Information: Selected Topics

• "Required by Law" Disclosures of PHI to DSS Under G.S. 7B-302 and 7B-3100, by Kirsten Leloudis (March 2023)
• Using and Disclosing Protected Health Information (PHI), by Jill Moore (May 2018)
• Disclosing PHI for Treatment, Payment, or Health Care Operations (TPO): Overview for NC Local Health Departments, by Jill Moore (May 2018)
• Decision Tool: Is a Release Required for TPO Disclosure?, by Jill Moore (May 2018)
• Disclosing PHI to Law Enforcement Officials: Overview for NC Local Health Departments, by Jill Moore (May 2018) [This document does not include information about a North Carolina law requiring reports to law enforcement when juveniles are victims of certain crimes (S.L. 2019-245, sec.1 [S 199], codified at G.S. 14-318.6). For more information about the new law, please see this summary and this online module.]
  
• Decision Tool: Required Reports to Law Enforcement, by Jill Moore (May 2018) [This tool is out of date and has been removed.]
• Outline: Responding to Requests for Minors' Health Information
• Health Law Bulletin: Responding to Subpoenas for Health Department Records, by John Rubin and Aimee Wall (September 2005)

Laws

• Selected NC General Statutes
• Link to HIPAA Combined Regulation Text (US DHHS website)