← ncdLabs
Honest the HIPAApotamus
Five-minute HIPAA training videos

Five-minute HIPAA lessons.

Honest and Shady teach HIPAA through short workplace comedies. Honest makes the right call. Shady has other ideas.

Featuring Honest the HIPAApotamus and Shady Squirrel

About five minutes each Pick the packs you need Stories from real workplaces Built to update yearly
Short on purpose

Each episode starts with a decision someone faces at work.

Topics include what counts as PHI, when to verify someone’s identity, how to spot a phishing message, or what to do after information goes to the wrong person.

Who it’s for

Use Honest in your training program—or offer it to your customers.

Workforce training

For healthcare organizations and business associates

Build a course for new hires, annual refreshers, managers, or teams with specialized responsibilities.

  • Core courses and lessons for specific roles
  • Short lessons that fit into real workdays
  • Privacy, security, and incident-response refreshers
  • Options for organization-specific details
Build a Training Package
The training packs

Start with the essentials. Add the packs your audience needs.

A lesson is one short video. A pack is a group of related lessons that can be assigned as a course. You can license one pack, combine several, or take the full library.

Add-on pack

Privacy in Practice

Everyday privacy decisions involving conversations, screens, paper, email, messaging, social media, and remote work.

Add-on pack

HIPAA Cybersecurity

Phishing, passwords, multifactor authentication, ransomware, lost devices, remote access, and security reporting.

Two editions

Incident & Breach Response

One edition teaches employees when and how to report a problem. The other covers investigation and documentation for compliance teams.

Role-focused

Patient Rights

Access, amendments, confidential communications, complaints, personal representatives, and related responsibilities.

Role-focused

Business Associate Essentials

Responsibilities for technology vendors, consultants, billing companies, subcontractors, and other business associates.

Leadership

Managers & Compliance Leaders

Policies, workforce accountability, escalation, sanctions, vendor oversight, and managers’ responsibilities for privacy.

Selectable lessons

Specialty Disclosures

Lessons for law enforcement requests, legal process, public health, minors, research, and other situations that need special handling.

Annual supplement

Annual HIPAA Update

A yearly look at rule changes, new guidance, enforcement trends, common breaches, and new security threats.

Need everything? The Complete Library puts the core packs, role-based lessons, specialty topics, and annual updates under one license.
The five-minute format

One situation. One useful rule. One action to remember.

See the situation

Honest encounters a recognizable privacy or security problem.

Understand the rule

The episode explains the rule behind the decision.

See both choices

Honest does it right. Shady shows what the shortcut can cost.

Answer one question

A quick check helps the lesson stick.

Meet the Cast

Meet Honest and Shady.

Honest the HIPAApotamus Honest the HIPAApotamus in a tweed suit holding a book titled Privacy Is Respect

Reliable, principled, and not impressed by shortcuts.

Shady Squirrel Shady Squirrel in a trench coat and fedora

Confident, glib, and usually one bad decision from real trouble.

Sizzle Reel

A short look at how Honest and Shady teach one HIPAA decision at a time. More episodes are on the YouTube channel.

Sizzle reel unavailable Check the YouTube channel for episodes, or try again later.
Role-based assignments

Give each role the lessons it can use

Not everyone needs the same course. Choose lessons that match the work each team actually does.

Front desk

Identity, waiting-room privacy, telephone disclosures, and family questions.

Clinical staff

Treatment, conversations, mobile devices, family involvement, and recording.

Revenue cycle

Payment, minimum necessary, payer communications, email, and fax safeguards.

IT & security

Electronic PHI, access, authentication, ransomware, and incident response.

Licensing

Use the series inside one organization or license it for your customers.

Pricing depends on how many people you train, how many customer organizations you serve, how the videos are delivered, and how much customization you need.

Internal use

Single-organization licensing

For healthcare organizations and business associates training their own workforce.

  • One pack or the full curriculum
  • Pricing based on workforce size
  • Annual updates available
A single-organization license covers internal training. If you want to offer the series to customers, you’ll need a multi-client license. Honest, Shady, and the videos remain the property of ncdLabs.
Keeping it current

Keeping the lessons current

Because the series is made of short, separate lessons, we can revise the videos affected by a new rule or security threat without replacing everything else.

Watch for changes

We follow HIPAA guidance, enforcement news, breach patterns, and security threats.

Review the lessons

We check the library each year and flag anything that needs to change.

Send the update

Licensees receive the revised lesson along with a plain summary of what changed.

Honest the HIPAApotamus supports workforce education. It does not replace organization-specific policies, role-appropriate instruction, risk analysis, legal advice, or other components of a HIPAA compliance program.
Good questions

Frequently asked questions

Is annual HIPAA training required?

HIPAA does not require every employee to watch the same annual video. Privacy training has to fit each person’s job and be repeated when a policy change affects that job. The Security Rule also calls for an ongoing security-awareness program. Many organizations use annual training as a practical way to reinforce the rules and keep a record of it.

Are five-minute lessons long enough?

It depends on the job and the lessons assigned. A five-minute video can teach one topic well, but no single video covers every role or every company policy. Honest lessons are meant to be combined into the course each group needs.

Is this training HHS approved or “HIPAA certified”?

No. The federal government does not certify commercial HIPAA training vendors. Honest supports employee education, but every organization still needs its own policies and compliance program.

Can we license individual packs?

Yes. Start with HIPAA Essentials, add the packs you need, or license the whole library.

Can training companies distribute the videos to customers?

Yes, under a multi-client distribution agreement. A single-organization license does not permit redistribution.

Can the series be customized or white-labeled?

Yes. We can discuss co-branding, your incident-reporting instructions, white-label delivery, or fully custom episodes. The scope and price depend on what you need.

Talk to us about your training program.

See how the series works, look through the packs, and tell us who you need to train.

See Honest in action

Tell us who you train and how you want to use the videos. We’ll show you the most relevant packs and explain the licensing options.

We’ll use these details only to respond to your inquiry. Replies come from ncdLabs.