Who needs what
Obligations differ by role and by specialty.
Your front desk, your endoscopy techs, your billing team and your psychiatrists don’t carry the same obligations — and assigning them all the same course is how compliance training becomes something nobody reads. Here’s what actually applies, role by role.
Role matrix
| Role | Tracks | Note |
|---|---|---|
| Front desk / reception | HIPAA (customer-facing add-on) | |
| Clinical / procedural (GI, endoscopy, injections) | HIPAA (clinical add-on), OSHA Clinical | Procedural exposure a non-procedural office doesn't have |
| Clinical / non-procedural (neurology, primary care) | HIPAA (clinical add-on) | OSHA Clinical only where real sharps/bloodborne exposure exists |
| Billing / AR / RCM | HIPAA, RCM Compliance | RCM Operations if building vocational skill, not just compliance |
| Psychiatry / behavioral health | HIPAA (Covered Entity and/or BA core) | See the boundary note below — does not include substance-use-record confidentiality rules beyond HIPAA |
| Technical / IT | HIPAA (technical-staff add-on), Cybersecurity Essentials | |
| Credentialing staff | Credentialing | Vocational, not compliance |
| Practice administrator / compliance officer | Oversight across all of the above | Assignment resolves automatically per person — the administrator reviews the roster, not a spreadsheet |
Answers, role by role
What HIPAA training does front desk staff need?
Front desk needs the HIPAA core track with the customer-facing add-on: verifying who they're speaking to, when to say no, and how to do both without being rude about it.
What training does clinical or procedural staff need (GI, endoscopy, injections)?
HIPAA core with the clinical add-on, plus OSHA Clinical for any role with sharps or bloodborne-pathogen exposure. A GI or endoscopy suite carries exposure a primary-care office doesn't — the assignment should reflect that, not a blanket policy.
What training do neurology and primary-care clinical staff need?
HIPAA core with the clinical add-on. Non-procedural specialties generally don't carry the bloodborne-pathogen exposure a GI or endoscopy suite does — OSHA Clinical is assigned where the exposure is real, not by default.
What training do billing and AR staff need?
HIPAA core, plus RCM Compliance for the False Claims Act and fraud-waste-and-abuse exposure that comes with the job. RCM Operations is the vocational track if you're building billing skill, not just covering compliance.
What training do psychiatry and behavioral-health staff need?
HIPAA applies the same as any other role — LaborGenie's HIPAA core and Covered Entity tracks cover the workforce broadly, including behavioral health. One boundary worth knowing: behavioral-health and substance-use records carry additional federal confidentiality rules beyond HIPAA. That additional layer isn't part of the curriculum today. If it applies to your practice, confirm it separately with counsel.
What training does technical or IT staff need?
HIPAA core with the technical-staff add-on, plus Cybersecurity Essentials.
What training does credentialing staff need?
The Credentialing track — 16 modules that teach the job itself, not just a compliance checkbox: CAQH, primary-source verification, payer enrollment, PECOS, and the rest of what the role actually requires.
What about a practice administrator or compliance officer?
Whatever their staff carries, plus visibility into all of it. LaborGenie resolves each person's assignment automatically from the roster, so the administrator's job is reviewing it, not building a spreadsheet to track who owes what.
Give it your roster.
See what resolves for each of your roles, live, and what the record looks like afterwards.