Annual computer-based training checks a box. It does not tell a scheduler whether a date of birth in a text is allowed, or whether a referral should go by cloud fax instead of a personal email. Small practices need extra, role-specific practice.
Thirty minutes that actually transfers
- Show the approved email, fax, and form buttons on a real workstation.
- Walk through one misdirected-message drill.
- Ban auto-forward to personal mail in writing.
- Give a one-page "if it names a patient and their care, use this channel" card.
Tools that match the training
Training fails when the approved tool is harder than the unapproved one. HIPAA Companion email, fax, and personalized forms are meant to be the easy path: a normal inbox, a fax that does not jam, and intake links patients can finish on a phone.
Document attendance. Repeat the short session when you hire, not only in October.