HIPAA training is not about ensuring employees have an encyclopedic knowledge of the HIPAA regulations. Training should provide a broad overview of HIPAA and its importance and cover the aspects of regulations that are appropriate to employees’ work duties. Employees must be able to identify PHI, be aware of the allowable uses and disclosures, understand the minimum necessary rule, patient rights, and the consequences of HIPAA violations.