Consistent with the administrative simplification provisions mandated under the law of HIPAA, certain organizational officers, designated individuals, organizational privacy contacts, and some line managers and employee supervisors may be required to certify that they have received post-designation and bi-annual refresher training respecting the HIPAA administration simplification provisions. HIPAA required post-designation and refresher training courses are available via a virtual learning platform sponsored by the BRCC.
In accordance with HIPAA best practices and regulatory requirements, the BRCC advises the following training for HIPAA designees:
| HIPAA Workforce Training Requirements | |||
| Designee | Initial Training | Refresher Training | Curriculum Components |
| Privacy Officer | Within 90 days of appointment | Every 24 months | • Introduction to the Privacy Rule • Introduction to the Security Rule • Introduction to the Breach Notification Rule • Introduction to the Enforcement Rule • Introduction to the Security Risk Analysis |
| Security Officer | Within 90 days of appointment | Every 24 months | • Introduction to the Privacy Rule • Introduction to the Security Rule • Introduction to the Breach Notification Rule • Introduction to the Enforcement Rule • Introduction to the Security Risk Analysis |
| Designated Individual | Within 90 days of designation | Every 24 months | •Introduction to the Privacy Rule • Introduction to the Security Rule |
| Privacy Contact in an HR Business Function | Within 90 days of assignment | Every 24 months | • Introduction to the Privacy Rule |
| Supervisors and Managers | Within 90 days of assignment | Every 36 months | • Introduction to the Privacy Rule |
The curriculum components outlined above are included within the range of instructional resources available through the Baldwin Professional Education Connection (“BPEC”), which offers live monthly webcasts featuring employee benefits related topics. The BPEC also conducts on-site training where necessary or otherwise required. For those individuals seeking to participate in our live broadcast training sessions, the following calendar outlines the available instructional opportunities available through December of 2025. Please note that all HIPAA Complete courses are broadcast on the first Tuesday of each month, beginning at 3:00 pm eastern, 12:00 pm pacific and pre-registration is required. Also, HRCI and SHRM continuing professional education credits are available for interested participants; however, credit is only available for participants joining live, rather than recorded, webcast presentations.
The BPEC’s educational opportunities are offered as a core service for the benefit of clients, prospective clients, and colleagues of Baldwin Risk Partners and its affiliate partnerships located throughout the United States. BPEC programming is developed in-house by the subject matter experts at the Baldwin Regulatory Compliance Collaborative. To the extent a program is supplemented with additional course materials, these items will be distributed to participants via email following the broadcast of the program, and an archive of previously broadcast presentations is available for viewing and downloading.
Baldwin Professional Education Connection 2026 HIPAA Complete Training Calendar
| Broadcast Date | Course Description | Speaker | Registration Link |
| February 3, 2026 | HIPAA101: An Introduction to the Privacy Rule | Natashia Wright | |
| March 3, 2026 | HIPAA 102: An Introduction to the Security Rule | Natashia Wright | |
| April 7, 2026 | HIPAA 103/104: An Introduction to the Breach Notification and Enforcement Rules | Deanna Sizemore | Register here |
| May 5, 2026 | HIPAA 105: Introduction to the Security Risk Analysis | Natashia Wright | Register here |
| June 2, 2026 | HIPAA101: An Introduction to the Privacy Rule | Natashia Wright | Register here |
| July 7, 2026 | HIPAA 102: An Introduction to the Security Rule | Dan Finnegan | Register here |
| August 4, 2026 | HIPAA 103/104: An Introduction to the Breach Notification and Enforcement Rules | Natashia Wright | Register here |
| September 8, 2026 | HIPAA 105: Introduction to the Security Risk Analysis | Dan Finnegan | Register here |
| October 6, 2026 | HIPAA101: An Introduction to the Privacy Rule | Deanna Sizemore | Register here |
| November 3 ,2026 | HIPAA 102: An Introduction to the Security Rule | Dan Finnegan | Register here |
| December 1, 2026 | HIPAA 103/104: An Introduction to the Breach Notification and Enforcement Rules | Natashia Wright | Register here |
For more information
We’re ready when you are. Get in touch and a friendly, knowledgeable Baldwin advisor is prepared to discuss your business or individual needs, ask a few questions to get the full picture, and make a plan to follow up.
This document is intended for general information purposes only and should not be construed as advice or opinions on any specific facts or circumstances. The content of this document is made available on an “as is” basis, without warranty of any kind. The Baldwin Insurance Group Holdings, LLC (“The Baldwin Group”), its affiliates, and subsidiaries do not guarantee that this information is, or can be relied on for, compliance with any law or regulation, assurance against preventable losses, or freedom from legal liability. This publication is not intended to be legal, underwriting, or any other type of professional advice. The Baldwin Group does not guarantee any particular outcome and makes no commitment to update any information herein or remove any items that are no longer accurate or complete. Furthermore, The Baldwin Group does not assume any liability to any person or organization for loss or damage caused by or resulting from any reliance placed on that content. Persons requiring advice should always consult an independent adviser.
The Baldwin Group offers insurance services through one or more of its insurance licensed entities. Each of the entities may be known by one or more of the logos displayed; all insurance commerce is only conducted through The Baldwin Group insurance licensed entities. This material is not an offer to sell insurance.
