Confidentiality in Action: HIPAA and PHI in HCBS Settings

Welcome back! In the last training, we explored incident reporting—how documentation protects both the people we support and the professionals who serve them. Now, we shift focus to another pillar of quality service: confidentiality and privacy.

In Home and Community-Based Services (HCBS), we are entrusted with highly personal information—health histories, support needs, behavioral plans, and more. This information is protected by law, and how we manage it speaks volumes about our professionalism and ethics.

This training will help you:

• Understand the laws and principles behind privacy protection
• Learn how and when information can be shared
• Strengthen your ability to protect the trust of every Member

Confidentiality isn’t extra—it’s expected. And HIPAA isn’t optional—it’s the law.

Learning Objectives: By the end of this training, you will understand:

• Define what qualifies as Protected Health Information (PHI)
• Recognize when and how PHI can be used or shared
• Apply the “Minimum Necessary” rule
• Identify security standards under HIPAA
• Understand the role of family members and authorized representatives
• Respond appropriately to privacy breaches