Education and Training
All members of the UCSF workforce, whether salaried or non-salaried, are required to
complete HIPAA privacy and information security training. This includes faculty, staff,
students, volunteers, as well as visitors who may have either direct or indirect access
to patients or their health information.
There are several levels of training depending upon the level of access to patients
and patient information which include basic and advanced training and can be viewed on-line
or printed for training as follows:
Additional training and approval may be required for access to specific UCSF clinical
systems, such as STOR, IDX, or electronic medical records. Contact the system owners and
department managers for any additional requirements. Documentation of individuals completing
the HIPAA training will be the responsibility of the unit providing the training. Each unit
sponsoring training will be expected to report which groups were trained and when.
Please note that research investigators may also have additional requirements by the
UCSF Committee for Human Research (CHR) from the Human Research Protection Program.