ALL Covered Entities and Business Associates are required by law to provide training resources to all members of staff. In addition, the law requires all training sessions to be reported on an annual basis. It is designed specifically for the purpose of determining the level of accountability in the event of an audit.
In the event of a data breach or other incident triggering an audit, if a Covered Entity or a Business Associate cannot produce training logs and certificates that the U.S. Department of Health and Human Services considers to be the core of compliance documentation, it becomes very problematic to assure the law enforcement authorities that the circumstance was not a result on lack of proper training and safeguards in place.
For questions or concerns, contact us via the following:
- Chatbox/window on your Complete Compliance Suite screen.
- Telephone: 877-560-4261
- Email: support@epicompliance.com