Learning Objectives for Module 1 Participants will be able to: • Recall the history and purpose of the Health Insurance Portability and Accountability Act (HIPAA). • Identify which entities are classified as Covered Entities under HIPAA. • Define who qualifies as a Business Associate under HIPAA regulations. • Define Protected Health Information (PHI) and understand its significance. • Explain the necessity of appointing a HIPAA Privacy Officer within their organization. • List and describe the five fundamental rights granted to individuals under HIPAA. • Summarize key clarifications and updates introduced by the HITECH and Omnibus rules. • Recognize potential HIPAA violations based on provided case studies and understand how to avoid similar situations. • Define what constitutes a HIPAA breach and understand the required timeframes for notification. • Describe the specific roles and responsibilities of the Privacy Officer in the context of breach notification. Learning Objectives for Module 2 Participants will be able to: • Define information security in the context of HIPAA. • Describe the requirements of the Administrative Safeguards under the HIPAA Security Rule. • Describe the requirements of the Technical Safeguards under the HIPAA Security Rule. • Describe the requirements of the Physical Safeguards under the HIPAA Security Rule. • Identify and explain the standards and implementation specifications within each of the safeguards under the HIPAA Security Rule. • Recognize potential security breaches based on provided case studies and understand how to prevent similar incidents. • Outline the criminal penalties associated with HIPAA violations. • Identify examples of criminal cases involving HIPAA violations. • Discuss potential penalties and legal actions under state tort law related to HIPAA breaches. • Articulate the vital role that HIPAA plays in maintaining overall information security within their organization.

This session provides a broad overview of ACA requirements, offering penetrating insights into the sweeping regulatory changes and broad impacts of this law. Learning objectives: • Understand the ACA requirements that apply to employer-sponsored group health plans • Evaluate your current program for ACA for compliance and identify potential monetary risks arising from non-compliance • Develop a strategy for ensuring compliance with the ACA, avoiding shared responsibility penalties, and responding effectively to any penalty assessments that are received from the IRS

This session provides an overview of the CAA and the impacts of mandated transparency requirements on employer-sponsored health plans. Learning objectives: • Understand how the four key requirements of the CAA and ways this law magnifies the fiduciary responsibility of employers • Determine whether your employee benefit program complies with CAA requirements, including mental health parity analysis, contract reviews, and required attestations and filings. • Develop a process for measuring the performance of service providers and advancing a collaborative approach in meeting the wide-reaching requirements of the CAA

This session provides a detailed overview of HIPAA privacy and security requirements, explanation of the ways self-funded plans are impacted by HIPAA rules, a review of essential steps for achieving HIPAA compliance, and practical tips for managing employee benefit plan compliance. Learning objectives: • Understand the risks inherent in handling Protected Health Information (PHI) and other types of confidential data, and the potential consequences of a data breach • Develop a process for ensuring the privacy and security of PHI and other sensitive information • Build an effective strategic and tactical framework for reducing risk while managing the significant compliance requirements that impact your employee benefit programs

- AI in HR: Opportunity vs. Risk - The NIST AI Risk Management Framework - AI in Hiring and Workforce Decisions - AI in Benefits, Leave, and Compliance - Governance, Fiduciary Duty, and Readiness