Yes – if you work for a HIPAA-covered entity. Covered entities are required to provide training on “policies and procedures with respect of PHI”; and, as a HIPAA violation is likely to concern an impermissible use or disclosure of PHI, training on how to identity and report a violation should be included in HIPAA training. If you work for a business associate, your employer is only required to provide you with security and awareness training. Nonetheless, your employer is subject to areas of the Privacy and Breach Notification Rules, and it would be in their best interests to train all members of the workforce on how to identify and report violations of HIPAA.