A strict interpretation of the Privacy Rule training requirements implies training only has to be provided to members of the workforce when their functions involve uses and disclosures of PHI. This interpretation would mean employees such as environmental services and maintenance personnel might be excluded from Privacy Rule training – making it harder for them to comprehend security awareness training or misleading them into thinking only electronic PHI is covered by HIPAA.