The brief
Healthcare operations staff handle names, records, appointments and case notes all day. The rules for sharing them are written down, but under pressure (a familiar caller, an urgent request, a busy team chat) people improvise. The course needed to turn those rules into something staff can recall in the moment.
What learners can do after
- Verify a requester's identity through the approved process
- Limit sharing to what is needed, through approved channels
- Keep patient information inside approved systems
- Report mistakes or possible exposure promptly
The framework
Four actions, in the order staff meet them on a real request. Every scene in the course maps back to one of them.
-
1
Verify
Confirm who's asking, even when they're familiar or it's urgent.
-
2
Limit
Share only what the request actually needs.
-
3
Use Approved Systems
Patient details stay in approved tools, never in general chat.
-
4
Report
Flag mistakes and possible exposure right away.
How the course was designed
Who it is for, what each objective is taught by and tested with, and the decisions behind it.
Front desk, records, billing and scheduling staff at a healthcare operations team.
On shift, at a desktop, between calls. Three minutes is the realistic window.
They've read the privacy policy. Knowing the rule isn't the gap.
Stop improvising under pressure. Verify, then share only what is needed, in approved systems.
Every objective has a scene and a question.
Pick one to see where it is taught and how it is tested.
Four design decisions
What we chose, and why. Timestamps point to where each one shows up.
- 0:05
Open with the people, not the policy.
The first 20 seconds connect names, record numbers and case notes to real patients before a single rule appears. Staff who see the person behind the record are more willing to slow down.
- 0:22
Four actions, in the order a request arrives.
Verify, Limit, Use Approved Systems, Report is the sequence staff meet on a real request, so the order itself becomes the memory aid.
- 0:35
Teach at the moment people slip.
Each action is shown inside a pressure moment: a familiar caller, a busy team chat, a screen a coworker can see. The rule lands where the mistake happens.
- Quiz
Wrong answers built from real shortcuts.
Every distractor is something a busy person would plausibly do, like a private screenshot or sharing just the first name. Recognising the shortcut is the skill being tested.
From policy language to something staff can say back.
Long sentences split into one action each; legal terms become the words staff use on shift.
Personnel shall not disclose PHI to any party whose identity and authorization have not been confirmed in accordance with Procedure IDV-03.
Before sharing patient information, verify who is requesting it, using ClearPath's approved process.
Disclosure shall be limited to the minimum necessary to accomplish the intended purpose.
Even when someone is authorized, share only the information they need.
…non-sanctioned communication channels, including but not limited to personal email, consumer messaging applications…
Do not move it to personal email, local folders, unapproved apps, or other locations simply because they seem more convenient.
Any actual or suspected unauthorized disclosure shall be reported… immediately upon discovery.
If information may have been exposed or shared by mistake, report it immediately.
Read the full source passage
Section 4.2: Disclosure of Protected Health Information. Personnel shall not disclose PHI to any party whose identity and authorization have not been confirmed in accordance with Procedure IDV-03. Disclosure shall be limited to the minimum necessary to accomplish the intended purpose. PHI shall not be transmitted via unsecured or non-sanctioned communication channels, including but not limited to personal email, consumer messaging applications and general-purpose collaboration channels. Any actual or suspected unauthorized disclosure shall be reported to the Privacy Office immediately upon discovery.
Sample source text written by ADC for this concept course. ClearPath HealthOps is a fictional brand.
Try the knowledge check
These are the questions learners answer after the scenarios. In your LMS, the score is recorded automatically through SCORM 1.2.
How a client would know it worked
The measures we recommend tracking after launch. A measurement plan, not results: concept courses have no learners yet.
Completion by team
Who has finished, from the LMS. Expect 100% for a mandatory course; chase the gaps.
First-attempt pass rate, per question
A low score on question 2 means verification needs reteaching, not the whole course.
Privacy reports per month
Expect reports to rise at first. More near-misses reported is the course working, not failing.
Spot checks of team chats
A quarterly sample of general channels for patient details, before and after launch.
What a client would receive
- SCORM 1.2 package with the scored knowledge check
- 2:25 MP4 master in 1080p
- Caption files (SRT and VTT)
- Full transcript
- Quiz questions and answers in an editable document