(Recorded Workshop) Business Associates and Breaches

Duration: 3 hours
Recorded on: 3/15/2022

This recorded training is the third of a three-part series. To purchase the full recorded series, click here.

Business Associates and Breaches will cover:

  • Identifying Business Associates
  • Executing Business Associate Agreements
  • Investigating and Reporting Breaches
  • Responding to an OCR Investigation

The workshop will also include:

  • An overview of the HIPAA regulations and compliance expectations
  • Discussion of relevant enforcement actions and guidance from OCR
  • Updates on proposed/pending changes to the HIPAA regulations
  • Tips on developing a more robust HIPAA compliance program in your health center

Target Audience

  • HIPAA Privacy Officers
  • HIPAA Security Officers
  • Compliance Officers
  • Health Center Directors
  • Operations staff
  • Medical records staff
  • Administrative and/or office staff

Learning Objectives

After this training, you will be able to:

  • Identify when a business associate agreement is required prior to disclosing patient information
  • Develop and/or revise your health center’s business associate agreement template to incorporate the required elements and provisions favorable to your health center
  • Understand the requirements for reporting breaches to patients, to the Office for Civil Rights and to the media
Course summary
Available credit: 
  • 3.00 Certificate of Attendance
Course opens: 
Course expires: 


A Partner in the firm’s health law practice group, Molly advises health centers on the management of clinical, employment and workforce-related risks, with a particular focus on professional liability, Federal Tort Claims Act, and HIPAA matters. From her experience as both a private attorney and in-house counsel, Molly knows the importance of managing liability and risk issues in mission-driven organizations. [Full Bio]


As Partner and Compliance Counsel with the firm’s health law practice group, Dianne advises health centers on implementing effective compliance programs and on addressing top compliance risk areas. Dianne counsels health centers and other organizations on developing compliance programs that include the OIG’s seven elements, respond to identified compliance risk areas, and reflect the organization’s culture.  Dianne also advises health centers and other organizations on patient privacy and confidentiality, including the HIPAA Privacy Rule and 42 CFR Part 2.  She has experience responding to privacy and security incidents, including determining whether there has been a breach, notifying patients and the government, and creating corrective action plans. [Full Bio]

Certificates of Attendance: We verify attendance upon completion of a training (live or recorded version) and will only issue certificates in the name of the account holder enrolled in the course. If you need to document attendance for someone other than the account holder, we provide blank Certificates of Attendance for a supervisor to sign and certify that a different individual viewed the course. 

Group Attendance: Due to the online nature of this training, we cannot verify participation by more than one person. For groups, we provide an attendance record form and blank Certificates of Attendance to record attendance at a group viewing session and document each individual's participation. We recommend that a supervisor or colleague sign the certificate to certify attendance. 

Read more about maintaining an attendance record in our FAQs.

Available Credit

  • 3.00 Certificate of Attendance


Please login or register to take this course.

This recorded training is the third of a three-part series. To purchase the full recorded series, click here.


Recorded webinars are available for 90 days after the date of purchase or date of the training. Once posted to your account, you can view this training anytime on-demand during the access period identified in your purchase confirmation. For additional information on viewing and accessing trainings, view our full terms and conditions here.


If you pay by credit card or PayPal, you will be able to access the recorded workshop immediately (unless the live training has not yet occurred). If you pay by check, we will grant access to the recording when we receive your check. You will receive a confirmation email once access is granted. FTLF reserves the right to suspend access to the training if payment is not received within 30 days. For more information on payments and registration, please visit our FAQ page.


No refunds will be provided for recorded trainings. FTLF can transfer a registration to someone else within your organization or, provided you have not already viewed the training, transfer the registration to another on-demand program. Where the registration fee for the new training is higher, you must also pay the difference between the original course and the new course registration fee at the time of transfer. Administrative fees may also apply. If your organization purchased a training under the account of a staff member who no longer works for your organization, please Contact Us. View our full policy on refunds and cancellations here.

Required Hardware/Software

Google Chrome and Mozilla Firefox are the preferred browsers.