All employees who have access to health information whose confidentiality is protected by the HIPAA Privacy Rule are required by the Rule to receive training so that they have an understanding and knowledge of the Privacy Rule that corresponds to their job responsibilities and of the group health plan’s policies and procedures that impact on their job duties. Training on the requirements of the HIPAA Privacy Rule and the plan’s health information policies and procedures under the direction of the institution’s privacy officer is a pre-requisite for this position. Employees who violate the requirements of the HIPAA Privacy Rule will be subject to discipline, up to and including termination.