The language of the Act implies that employees should be provided with training as it relates to the scope of their employment. If teachers do not have access to school treatment records or any other non-exempt PHI, they should only need to have an understanding of the privacy clauses of the Medical Records privacy Act to mitigate the risk of an unauthorized verbal disclosure. All other HB300 training will not fulfil the criteria of being “appropriate”.