The Lighthouse · Signature Series

HIPAA Compliance for Healthcare Teams: Protect Patient Information Every Day

Signature Course No. 320 — A Signature AI Socratic Coaching Course.

No experience needed — your coach starts where you are.

Preview This Course — Free
An agentic, mastery-based AI learning platform.

A New Kind of Learning

Socratic coaching, delivered by an agentic AI coach.

Not a course you watch. An AI coach you work with.

The Lighthouse Coach begins by discovering how you think about the subject, teaches what is missing, and gives you realistic practice before asking you to prove that you can use it. You may test out of concepts you already understand, while capstones turn the learning into a practical plan, decision, conversation, or other real-world result.

The curriculum is deliberately authored; the AI delivers it through coaching. It is not an AI randomly generating lessons.

Meet The Lighthouse Coach

A coach that teaches by asking — not by lecturing

The Lighthouse Coach is an AI Socratic coach built on Cognosco Learning's HIPAA Compliance for Healthcare Teams: Protect Patient Information Every Day course, in the Risk, Safety & Compliance category. It does not play videos at you. It holds a conversation: it asks you a question, listens to your answer, names the misconception it hears, affirms what you got right, and asks the next question — the way a great coach works in the room.

Most privacy failures are not break-ins. They are ordinary people sharing a little too much, with a little too little thought, on an ordinary day. A patient tells you things she tells almost no one else — what hurts, what frightens her, what she takes, what she cannot afford — because care requires it, and she trusts that the information will travel only where care requires it to travel, guarded at every step. HIPAA is that trust written as law, and this course teaches you to keep it.

It starts with the definition. You will learn the test that decides what counts as protected health information in any form — spoken, written, or electronic — who the rules bind, from covered entities and business associates down to every member of the workforce, and the Privacy Rule's core logic: name the purpose first, find the gate that purpose may pass through, obtain permission where the rules require it, and limit every use to the minimum necessary.

It works in two movements. First, Module 1 — Know What Counts and Who May See It — work through Concepts 1–9, finishing with The Privacy Walk-Through; then, Module 2 — Guard It in Systems, and Answer When It Fails — work through Concepts 10–18, finishing with The Breach Response File.

Both capstones produce real artifacts — a privacy walk-through report with a correction plan for one clinic day at Marigold Health System's women's health clinic: the walk record, the gate analyses for six sharing events, the rights queue worked inside its clocks, and a signed handover note; and a breach response file for one bad week at Marigold General: the incident register, the recognition assessments, the sequenced response, the notification readiness file, and the rebuilt daily routine.

The honesty standard is part of the course. This course teaches the HIPAA rules themselves, at workforce level — the duties you can carry out on an ordinary Tuesday, in your actual job. It is information for the workforce, not legal advice, and it does not replace your employer's policies, which may be stricter than the federal floor; where a stricter rule covers the same act, the stricter protection controls, and this course teaches you to say so and route the case to your Privacy Officer or Security Officer.

The course is self-paced and always on — roughly 30 minutes per concept, about 9 hours in full, taken in as many sittings as you like. You can type your answers, or talk out loud: the Voice Coach speaks its questions and listens to your spoken replies. Learners who already know the material can test out concept by concept.

HIPAA Compliance for Healthcare Teams: Protect Patient Information Every Day is part of The Lighthouse Signature Series — the online counterpart to the one-day, in-person learning Cognosco Learning has delivered since 2002.

Course Facts

Concepts18 · 2 modules
Capstones2
Time per concept≈ 30 minutes
Full course≈ 9 hours, self-paced
FormatOnline · AI voice coach
CertificateOn completion
VerificationVerifiable online
Introductory price$195

One full concept, coached end to end — free: verify your email and we’ll send you a link to start.

Already enrolled? Enter the course →

The Method

Diagnose → Learn & Practice → Prove → Capstone

Every learner moves through the same discipline a Cognosco instructor would insist on in the room.

1

Diagnose

The Coach starts where the course starts: with your own coverage. Name your employer's Privacy Officer and Security Officer from memory — or say what that gap predicts about your next hard case; list every way patient information crosses your own work in one shift — spoken, paper, screen, phone — and say which of those crossings you have never thought of as governed by a rule; and state which rule you follow when a stricter state rule and the federal floor cover the same disclosure. Every concept opens with three questions that locate where you actually stand, and your answers shape how deeply the Coach works the concept with you. Everyone begins with Module 1 — no skipping the foundations you only think you have.

2

Learn & Practice

Work each concept in conversation with the Coach — spoken or written — then practice it against realistic situations until it holds up.

3

Prove

Every concept ends in proof: answer the check cold and demonstrate the skill. Know it already? Test out and take credit immediately.

4

Capstone

Finish with two capstones — The Privacy Walk-Through for Module 1 and The Breach Response File for Module 2 — that pull the whole course together, and earn the certificate.

The Course Content

What You'll Learn

Permission and purpose decide sharing; habit never does. Every disclosure in this course is tested the same way: what is the purpose, does the rule permit or require it on that purpose, is permission needed first, and what is the smallest amount that serves the purpose? A disclosure that cannot answer those four questions in order does not happen, however routine it feels.

Module 1 teaches what counts and who may see it. The law and its three working rules; the running system, Marigold Health System, in full; the definition of PHI and its edges; the Privacy Rule's gates for treatment, payment, and operations; authorization; minimum necessary; the patient's rights and their clocks; talking about patients in corridors, elevators, and on the phone; and the physical safeguards of paper, screens, and places.

Module 2 teaches you to guard it in systems, and answer when it fails. Access controls and unique identity; audit, integrity, and authentication; sending PHI safely; workforce duties and reporting without fear; business associates under written promises; breach recognition by the Rule's test; breach response and notification in sequence; the special situations that bend the general rules; and the signature you leave on every act, every day.

And it holds its boundary throughout. This course teaches the law that governs the information wherever it lives — spoken in a hallway, printed on a fax cover sheet, stored in a record system, carried on a tablet, or remembered in your head on the drive home. It assumes no legal background and no particular job: if you can describe your own daily work honestly, you have everything this course requires to start.

What you will learn

  • State what HIPAA governs, whom it binds, and what your own role requires of you
  • Identify protected health information in any form, and distinguish it from information the rules do not cover
  • Apply the Privacy Rule correctly: share for treatment, payment, and operations; obtain permission where the rules require it; limit every use to the minimum necessary
  • Honor patient rights — access, amendment, restrictions, confidential communications, and accounting of disclosures — accurately and on time
  • Guard electronic information with the Security Rule's safeguards: controlled access, audit and integrity, safe transmission, and physical care of devices, paper, and spaces
  • Recognize a breach, respond in the right order, meet notification duties, and work correctly with business associates and in special situations
What's Included

Everything in the course

  • All 18 concepts of HIPAA Compliance for Healthcare Teams: Protect Patient Information Every Day, in 2 modules
  • A starting-point check first — the Coach finds where you actually stand before teaching
  • Learn, Practice, Prove for every concept — no passive video watching
  • A test-out on every concept: prove you know it and move on
  • The Voice Coach: talk with the Coach out loud — it speaks, listens, and replies
  • A personal Learner Record of your work across the course
  • Two capstone exercises: The Privacy Walk-Through and The Breach Response File
  • A printable session summary whenever you pause
  • The Lighthouse Coach completion certificate (Signature Series)
  • Your progress is saved as you go — stop anytime, resume where you left off
Who It's For

Built for everyone patient information crosses

Clinical staff — nurses, physicians, therapists, technicians, pharmacists, and aides who create, hear, and share patient information in the course of care; and administrative staff — registration, scheduling, billing, coding, medical records, and front-desk teams whose work touches identifiers and records all day, often without a patient in the room.

Support and facilities staff — housekeeping, transport, dietary, maintenance, and security, who enter rooms where information lives and whose duties include leaving it exactly as private as they found it.

Leaders, supervisors, and volunteers — anyone who directs others' handling of patient information, answers for a team's habits, or serves in any role where a patient's name and story could cross their path. This course assumes no legal background and no particular job.

Prefer to learn live and in person? The same material anchors Cognosco's one-day programs — browse the in-person catalog.

Enroll

Start with HIPAA at a Glance

$195 — introductory price. One payment. No subscription, no password to manage.

Here is exactly what happens when you enroll:

  • Pay securely with Stripe — you are taken straight into the course
  • Create your learner profile and begin the Module 1 starting-point check
  • Save the access key you are given — it restores your enrollment on any device
  • Learn at your pace; your progress is stored in your browser on your device

For the full voice experience, use Chrome and allow the microphone when asked. Typing your answers works everywhere, all the time. Questions before you enroll? Email hello@cognoscolearning.com.

The Lighthouse Coach — HIPAA Compliance for Healthcare Teams: Protect Patient Information Every Day$195.00
Total · introductory price, one-time$195.00

Secure checkout by Stripe. The moment your payment completes, you are taken straight into the course to create your learner profile and begin — no account password to manage. You will receive an access key to save; it restores your enrollment on any device.

Good Questions

Before you enroll

What is a Socratic coaching session?

A conversation, not a video. Your coach asks a question; you answer — out loud by voice, or by typing — and the coach responds to what you said: naming the misconception it hears, affirming what you got right, and asking the next question. You advance only when you have mastered each concept, so a finished course means the learning held.

How long does it take — and how long do I have?

About 30 minutes per concept. Learn in sittings of any length; your progress is saved as you go. You have a full year from purchase to finish, and you can revisit and retake within that year.

What does the certificate verify?

That you completed every concept and both capstones of this course. Anyone can confirm a Cognosco certificate online — enter its certificate ID on our verification page.

What if it isn't for me — what are the refunds?

If you have not started, cancel for a full refund within seven days of purchase. Once you have started, there is no cash refund — stop before finishing and we credit the full amount you paid toward any other course in the library (credit valid one year from your original purchase). Once you complete the course, no refund or credit applies.

The Signature Series Continues

More Signature Courses are coming

HIPAA Compliance for Healthcare Teams: Protect Patient Information Every Day is Signature Course No. 320. Leave your email and we'll send you news of future Signature Courses and Lighthouse updates as they are announced — nothing else.