HIPAA Security Training Compliance Enforcement Begins July 22

Action Required: HIPAA Security Training Compliance Enforcement Begins July 22

As part of Columbia University Irving Medical Center's ongoing commitment to protecting patient information and maintaining regulatory compliance, enforcement of Level 2 sanctions for the 2025 Annual HIPAA Security Training begins today, July 22.

The 2025 Annual HIPAA Security Training deadline was December 31, 2025. Users who have not yet completed the required training and remain non-compliant will be subject to Level 2 sanctions, which may result in restricted access to CU & CUIMC resources until the training requirement has been fulfilled.

What to Expect

• Users who remain non-compliant will have access restrictions applied beginning July 22.
• After training is completed, account holds are not removed immediately.
• Access restoration may take up to three hours following successful completion of the training.
   

Required Action

If you have not yet completed the 2025 Annual HIPAA Security Training, please do so as soon as possible to avoid disruption to your access to CU and CUIMC systems and services.

To complete the training, visit the Columbia Learning Management System (LMS): https://columbia.sabacloud.com/
 

Need Assistance?

If you have questions regarding your training status or experience issues after completing the training, please contact the Service Desk for assistance.

Thank you for your cooperation and support in helping protect the confidentiality, integrity, and security of CUIMC information systems and patient data.