Patient Data Protection
Every touchpoint — EHR, labs, prescriptions — involves data protected by HIPAA, GDPR, or both.
Average cost of a healthcare data breach (IBM, 2024)
HIPAA enforcement actions since 2003
Most breached industry for 14 consecutive years
Every touchpoint — EHR, labs, prescriptions — involves data protected by HIPAA, GDPR, or both.
Most targeted industry for ransomware. NIS2 classifies hospitals as essential entities.
Strict FCPA and UK Bribery Act obligations for pharma and medical device companies.
OSHA mandates training on bloodborne pathogens, hazardous materials, and violence prevention.
Doctors, nurses, technicians. PHI handling, breach reporting, patient consent, AI decision-support boundaries.
Front-desk, billing, records, scheduling. Day-to-day PHI workflows, patient access requests, vendor disclosure rules.
Clinical engineering, IT, biomed devices. NIS2 cyber resilience, ePHI access controls, ransomware tabletop, third-party risk.
DPO, compliance officers, board. HIPAA + GDPR programme oversight, AI Act risk classification, audit readiness, board reporting.
Tracks group multiple courses around a single regulation or risk area. Pick one, a few, or build a full programme — each module maps to the article, section, or directive it supports.
Privacy and security standards for protected health information
EU data protection for patient records and health data
Cybersecurity requirements for healthcare entities
Workplace safety standards for healthcare settings
FCPA and UK Bribery Act obligations for pharma and medical devices
Reporting channels for compliance violations