Who needs what
Obligations differ by role and by specialty.
Your front desk, your endoscopy techs, your billing team and your psychiatrists don’t carry the same obligations — and assigning them all the same course is how compliance training becomes something nobody reads. Here’s what actually applies, role by role.
Role matrix
| Role | Tracks | Note |
|---|---|---|
| Front desk / reception | HIPAA (front desk & clinical add-on) | |
| Clinical / procedural (GI, endoscopy, injections) | HIPAA (clinical add-on), OSHA Clinical | Procedural exposure a non-procedural office doesn't have |
| Clinical / non-procedural (neurology, primary care) | HIPAA (clinical add-on) | OSHA Clinical only where real sharps/bloodborne exposure exists |
| Billing / AR / RCM | HIPAA, RCM Compliance | RCM Operations if building vocational skill, not just compliance |
| Psychiatry / behavioral health | HIPAA (Covered Entity and/or BA core) | See the boundary note below — does not include substance-use-record confidentiality rules beyond HIPAA |
| Technical / IT | HIPAA (technical-staff add-on), Cybersecurity Essentials | |
| Credentialing staff | Credentialing | Vocational, not compliance |
| Practice administrator / compliance officer | Oversight across all of the above | Assignment resolves automatically per person — the administrator reviews the roster, not a spreadsheet |
Answers, role by role
Every answer below is self-contained — expand any question to read the full answer, or hand the whole page to your compliance officer.
What HIPAA training does front desk staff need?
Front desk needs the HIPAA core track with the front desk & clinical add-on: verifying who they're speaking to, when to say no, and how to do both without being rude about it.
What training does clinical or procedural staff need (GI, endoscopy, injections)?
HIPAA core with the clinical add-on, plus OSHA Clinical for any role with sharps or bloodborne-pathogen exposure. A GI or endoscopy suite carries exposure a primary-care office doesn't — the assignment should reflect that, not a blanket policy.
What training do neurology and primary-care clinical staff need?
HIPAA core with the clinical add-on. Non-procedural specialties generally don't carry the bloodborne-pathogen exposure a GI or endoscopy suite does — OSHA Clinical is assigned where the exposure is real, not by default.
What training do billing and AR staff need?
HIPAA core, plus RCM Compliance for the False Claims Act and fraud-waste-and-abuse exposure that comes with the job. RCM Operations is the vocational track if you're building billing skill, not just covering compliance.
What training do psychiatry and behavioral-health staff need?
HIPAA applies the same as any other role — LaborGenie's HIPAA core and Covered Entity tracks cover the workforce broadly, including behavioral health. One boundary worth knowing: behavioral-health and substance-use records carry additional federal confidentiality rules beyond HIPAA. That additional layer isn't part of the curriculum today. If it applies to your practice, confirm it separately with counsel.
What training does technical or IT staff need?
HIPAA core with the technical-staff add-on, plus Cybersecurity Essentials.
What training does credentialing staff need?
The Credentialing track — 16 modules that teach the job itself, not just a compliance checkbox: CAQH, primary-source verification, payer enrollment, PECOS, and the rest of what the role actually requires.
What about a practice administrator or compliance officer?
Whatever their staff carries, plus visibility into all of it. LaborGenie resolves each person's assignment automatically from the roster, so the administrator's job is reviewing it, not building a spreadsheet to track who owes what.
Do you track external licenses and credentials, or just LaborGenie training?
Both — in the same system, but clearly separated. Every person's profile can carry tracked external credentials alongside their platform training record: state licenses, DEA registrations, board certifications, CAQH attestations. They're recorded as claims with document evidence, not as platform-verified facts, and they never enter the signed attestation chain. Expiry reminders go out at 90, 60, and 30 days before anything lapses. The separation is deliberate — a self-reported credential and a platform-verified training completion are different things, and LaborGenie doesn't blend them.
Can a manager be required to acknowledge a completion?
Yes. Organizations can require a manager countersignature on completions for specific roles or tracks. When required, the completion lands in the manager's review queue on their own console; their acknowledgement is a separate signed record chained to the completion. The training record then carries two signatures before it's considered closed — and the same append-only rule applies to the countersignature as to everything else in the chain.
What if the training my team needs doesn't exist yet?
Request it. LaborGenie builds custom tracks for organizations whose compliance or vocational needs fall outside the current catalog. Custom tracks plug into the same role-assignment model, quiz gates, and attestation record as every existing track — not a separate system, and not a PDF you have to chase people to sign.
Don’t see the training your team needs?
LaborGenie builds custom tracks for organizations whose compliance or vocational needs fall outside the current catalog. Request a track and it gets built into the same role-assignment model, quiz gates, and attestation record as everything else — not a separate system, not a PDF you have to chase people to sign.
Give it your roster.
See what resolves for each of your roles, live, and what the record looks like afterwards.