This depends on the nature of the material change. If, for example, the change impacts Business Associate Agreements, only those with a responsibility for the Agreements would need retraining. However, if the Department of Health & Human Services prohibited previously permissible uses and disclosure of PHI, the whole workforce may need re-training – but only on uses and disclosures.