Instructor resource · Design review
Review the learning experience
This is a formative instructional-design review. The reviewer is not expected to adjudicate pharmacy-law accuracy.
Review from a student’s position
Allow 30–45 minutes for a focused review, or 100–120 minutes for the full learning experience. Start with the orientation, complete lessons 3–4 and 7, then sample two Pharmacy Practice Cases. Inspect the objective map below. Use the review-mode link above before answering: it suppresses anonymous reporting and lesson checkmarks for this browser. Return to student mode using the banner link when finished.
Do not enter patient information. Record comments using the lesson number and question ID. Put the highest-priority revisions first. Flag apparent legal ambiguity for the instructor rather than guessing the law.
| Review area | Evidence to examine | Useful comment |
|---|---|---|
| Independent learning | Can the student understand each rule, worked example, and feedback without a live explanation? | Quote the unclear sentence; state the explanation or example that is missing. |
| Alignment | Does instruction teach the objective at its stated cognitive level? Does practice ask students to do that work? | Identify an objective with weak instruction or practice and suggest a targeted task. |
| Question quality | Can a student answer by option length, repeated wording, absurd distractors, or “always/never” cues? | Name the item and cue; suggest a plausible alternative or clearer facts. |
| Feedback | Does every choice explain the reasoning? Does it help a wrong-answer student try again? | Identify the misconception left unresolved and proposed wording. |
| Workload | Does the stated 100–120-minute estimate match reading and deliberate practice? | Identify the section to shorten or expand and why. |
| Usability/accessibility | Keyboard navigation, focus visibility, mobile reflow, heading hierarchy, contrast, and print review. | Describe the action, device, and observed barrier. |
| Support/orientation | Ungraded status, exam relevance, navigation, privacy disclosure, technology instructions, and class follow-up. | State what a student would not know how to do. |
Quality Matters principles applied
The design uses the published Higher Education Rubric’s eight general areas: overview/introduction; measurable objectives; assessment/measurement; instructional materials; activities/interaction; technology; learner support; accessibility/usability. Objective–instruction–practice alignment is explicit. This is not a formal QM certification review, a reproduction of licensed annotations, or a claim that an isolated module meets every course-level standard. The Canvas course supplies syllabus, institutional support, accommodation processes, and broader assessment policies. The instructor should check that those links remain clear before release.
Comment format
Location: lesson / question ID. Problem: what the student cannot infer or may misinterpret. Evidence: exact text or interaction. Change: proposed wording or behavior. Priority: must fix / improves learning / polish.
Before release
- Complete instructor legal review and review all colleague “must fix” comments.
- Check student-facing Canvas launch instructions and institutional help/accommodation links.
- Test the published site, portable HTML, and print output on the devices students use.
- Use review mode for faculty demonstrations/testing so answers do not enter class statistics.
- Interpret statistics as first recorded answers per browser, not unique students or proof of completion.
- Compare frequent distractors to their explanations and plan the November 2 discussion. The instructor report can be requested through this conversation; the database is not exposed to students.
Legal correction log
| Prior statement or item | Revision and source |
|---|---|
| Handout p. 10: significant risk of harm | Replaced with breach presumption and documented low-probability-of-compromise analysis using four factors. 45 CFR 164.402; lesson 7. |
| Handout pp. 10–11: notification/substitute notice | Specified ≥500 national HHS and >500 resident media thresholds; discovery-based outer limits; annual small-breach reporting; <10 / ≥10 substitute-notice rules and 90-day requirements. 164.404–408. |
| Handout p. 4: “only” TPO without authorization | Added other permission pathways and their conditions. 164.502, .510, .512. Objective 16 is retained as the three TPO categories, not an exhaustive list. |
| Handout pp. 6–7: treatment and minimum necessary | Used the provider-treatment disclosure/request exception precisely, distinguished internal uses, and added the administrative-simplification exception. 164.502(b), .514(d). |
| Handout p. 5: de-identification and covered status | Added both recognized methods and Safe Harbor boundaries; tied provider coverage to qualifying electronic transactions. 160.103; 164.514(a)–(b). |
| Handout pp. 8–9: agents/representatives and access | Added authority/scope, patient-agreement and best-interest pathways, directly relevant limits, and after-death distinctions. Added access/amendment procedures, timing, fees, and email preference handling. 164.502(g), .510(b), .522, .524, .526. |
| Handout pp. 7–8: notice checklist | Retained delivery and acknowledgment rules. Required-content groups are now background only; advanced Part 2 and reproductive-health material is outside student scope. Actual pharmacy notices must still meet all applicable current requirements. |
| Handout p. 10: accounting | Added exclusions, recipient address if known, response/extension limits and first-in-12-months fee rule. 164.528. |
| Handout pp. 12–14: security/disposal/enforcement | Removed addressable-specification teaching from student scope; described disposal examples as settlements; removed obsolete civil dollar ranges from learning targets; retained culpability and statutory criminal categories. Corrected reasonable cause to current 160.401 wording. Verified Hinchy against judicial text and confined the example to Indiana. |
| Readiness/mastery questions 4, 5, 7, 9–12, 14, 17–20; handout quiz 8, 10, 16, 21 | Replaced ambiguous, overbroad, or misframed items with explicit purpose, authority, safeguards, scope, and incident-assessment facts. All choices now have reasoning. Separate Pharmacy Practice Cases replace repeated readiness/mastery items. |
Statistics interpretation and access
The instructor can ask the assistant in this conversation for a “HIPAA question difficulty report.” The owner-authorized database tools read the aggregate count table; no public statistics endpoint or student login is used. The report should show total first recorded answers per question, incorrect count/rate, most common incorrect choice and its misconception, and mapped objectives. Do not describe these as unique students: public visitors, new browsers, storage clearing, opt-outs, or failed transmissions can affect counts. Low-count questions deserve caution. Use the report to plan discussion, not assess individuals.
Consolidated faculty revisions
Version 2026-10-07-v2 has 44 practice questions. Readability was revised for P3 students, and generic example headings and cryptic takeaways were replaced. Claims/code sets and NPI (original objectives 3–4), the detailed notice checklist (original objective 22), expert determination, and specialized accounting rules are background only. Objective 2 now covers privacy/security/breach roles; objective 10 focuses on Safe Harbor; objectives 43–44 make access/amendment and accounting deadlines explicit. Original numbers are preserved and gaps are intentional.
Removed advanced legal-process and Part 2 instruction and court-order/subpoena questions. Original objectives 18 and 20 remain because authorization and minimum necessary are still taught. Removed question IDs: L1-02, L1-03, L2-03, L2-05, L2-06, L3-05, L5-01, L5-04, M05, M10, M11. Additional patient-record and form explorations support practice without sending statistics.
Checkmarks are stored only in the student’s browser after the lesson end is reached and all practice questions are submitted. Correctness is not required. Resetting progress does not erase answer receipts or change anonymous totals. Review mode suppresses both reporting and completion. A new reporting version separates revised-question totals from the earlier draft; matching-question totals encode the three selected categories together.
Additional interaction checks for the reviewer
- Can keyboard and touchscreen users open definitions, examples, and form highlights?
- Does the safeguard matching question explain each mistaken pairing?
- Do the identifier and disposal explorations clarify a rule instead of merely decorating the page?
- Are background topics clearly distinguished from exam targets?
- Does a checkmark appear only after all practice questions and the lesson’s end, and survive a return visit?
Visual and interaction refinement
The header uses the instructor-provided white school logo. Completion marks appear before lesson numbers. Check Answer buttons show green correct-answer feedback with a text label and checkmark. The label and safeguard-scene hotspots support hover, focus, and click/tap. A three-stage spouse telephone conversation replaces the earlier caregiver reveal examples. Pharmacy Practice Cases replaces the former mixed-case heading. These explorations do not submit statistics.
Image and video review
Lessons 3–5 use responsive images with wrapped text; lesson 8 uses a paired illustration. Check that the surrounding facts, not facial expressions, establish the legal distinction. Images stack above text on narrow screens.
Lesson 4 question L4-02 includes a 10-second video, optional playback controls, English captions, and a descriptive transcript. The instructor confirmed the dialogue. Caption timing was estimated from the audio waveform; playback and synchronization require human browser review. Confirm that the video pauses when changing lessons and that the written case remains sufficient without playback. Review mode suppresses answer reporting and completion as before.
English and Spanish review
The language toggle translates learner instruction, objectives, questions, choice-specific feedback, definitions, image descriptions, progress/reporting messages, and the printable HTML review. The video retains English audio and offers Spanish captions and a translated transcript. Source regulations and the downloadable review PDF remain in English. The Spanish translation has not had an independent bilingual subject-matter review. Compare both languages for legal meaning, deadlines, distractor plausibility, and unintended answer cues. Language changes share question IDs, progress, and first-answer receipts.
Objective–instruction–practice alignment
| Objective | Instruction | Practice |
|---|---|---|
| 1. Define HIPAA and describe its original intent and expanded scope. | Lesson 1: What HIPAA covers Instruction + example + takeaway | L1-01 |
| 2. Distinguish the Privacy, Security, and Breach Notification Rules and their roles in pharmacy practice. | Lesson 1: What HIPAA covers, Lesson 2: Recognizing and protecting information Instruction + example + takeaway | ; lesson 2 “Privacy or security?” exploration |
| 5. Identify the three safeguard categories under the Security Rule: administrative, physical, and technical. | Lesson 2: Recognizing and protecting information Instruction + example + takeaway | L2-04 |
| 6. Describe examples of each safeguard type in a pharmacy setting. | Lesson 2: Recognizing and protecting information Instruction + example + takeaway | L2-04 |
| 7. Evaluate whether a pharmacy’s security measures are “reasonable and appropriate” under HIPAA. | Lesson 2: Recognizing and protecting information Instruction + example + takeaway | M02 |
| 8. Define Protected Health Information (PHI) and list examples relevant to pharmacy practice. | Lesson 2: Recognizing and protecting information Instruction + example + takeaway | L2-01, M02 |
| 9. Identify types of identifiers that make health information individually identifiable. | Lesson 2: Recognizing and protecting information Instruction + example + takeaway | L2-01, L2-02, M12 |
| 10. Explain and apply Safe Harbor de-identification to pharmacy information. | Lesson 2: Recognizing and protecting information Instruction + example + takeaway | L2-02, M12 |
| 11. Distinguish between covered entities and business associates under HIPAA. | Lesson 1: What HIPAA covers Instruction + example + takeaway | L1-04, L1-05, M01 |
| 12. Identify examples of business associates in pharmacy operations. | Lesson 1: What HIPAA covers Instruction + example + takeaway | L1-04, M01 |
| 13. List and describe the rights patients have under HIPAA (access, amend, accounting, restrict, confidential communication). | Lesson 4: Patients, representatives, and others Instruction + example + takeaway | L4-06, L4-07, L4-08 |
| 14. Apply procedures for responding to patient requests regarding their PHI. | Lesson 4: Patients, representatives, and others Instruction + example + takeaway | L4-04, L4-05, L4-06, L4-07, L4-08, M03 |
| 15. Determine when a personal representative may access PHI and when an agent may not. | Lesson 4: Patients, representatives, and others Instruction + example + takeaway | L4-01, L4-02, L4-03, L4-09, M04 |
| 16. Identify treatment, payment, and health care operations (TPO) as important permitted uses and disclosures without authorization. | Lesson 3: Deciding whether information may be shared Instruction + example + takeaway | L3-01 |
| 17. Apply the TPO framework to pharmacy scenarios. | Lesson 3: Deciding whether information may be shared Instruction + example + takeaway | L3-01, L3-02, M01 |
| 18. Determine when written authorization is required for PHI disclosure. | Lesson 3: Deciding whether information may be shared Instruction + example + takeaway | L3-03 |
| 19. Explain the Minimum Necessary Standard and its exceptions. | Lesson 3: Deciding whether information may be shared Instruction + example + takeaway | L3-02, M01 |
| 20. Evaluate whether a PHI disclosure meets the Minimum Necessary Standard. | Lesson 3: Deciding whether information may be shared Instruction + example + takeaway | L3-03 |
| 21. Define incidental disclosures and assess whether they are HIPAA violations. | Lesson 3: Deciding whether information may be shared Instruction + example + takeaway | L3-04, M02 |
| 23. Describe the distribution and posting requirements for the NPP. | Lesson 5: Notices and acknowledgment Instruction + example + takeaway | L5-02 |
| 24. Explain the acknowledgment of receipt process and documentation requirements. | Lesson 5: Notices and acknowledgment Instruction + example + takeaway | L5-03 |
| 25. Apply HIPAA rules to situations involving refusal to sign the acknowledgment. | Lesson 5: Notices and acknowledgment Instruction + example + takeaway | L5-03 |
| 26. Define a designated record set and its relevance to patient access. | Lesson 4: Patients, representatives, and others Instruction + example + takeaway | L4-04 |
| 27. Describe the format and fee requirements for providing PHI to patients. | Lesson 4: Patients, representatives, and others Instruction + example + takeaway | L4-04, L4-05, M03 |
| 28. Apply professional judgment in disclosing PHI to agents. | Lesson 4: Patients, representatives, and others Instruction + example + takeaway | L4-01, L4-02, L4-09, M04 |
| 29. List the required elements of an accounting of disclosures. | Lesson 6: Accounting for disclosures Instruction + example + takeaway | L6-02, L6-03, M06 |
| 30. Identify disclosures excluded from the accounting requirement. | Lesson 6: Accounting for disclosures Instruction + example + takeaway | L6-01, L6-03, M06 |
| 31. Define a breach under HIPAA and list the exceptions. | Lesson 7: Incidents, notification, and disposal Instruction + example + takeaway | L7-01, L7-02, L7-03, M07 |
| 32. Apply breach-notification recipients, thresholds, and deadlines for individuals, HHS, and media. | Lesson 7: Incidents, notification, and disposal Instruction + example + takeaway | L7-04, L7-05, M08 |
| 33. Explain the concept and use of substitute notice. | Lesson 7: Incidents, notification, and disposal Instruction + example + takeaway | L7-06 |
| 34. Describe HIPAA’s expectations for PHI disposal. | Lesson 7: Incidents, notification, and disposal Instruction + example + takeaway | L7-07, M09 |
| 35. Identify common violations and enforcement actions related to disposal. | Lesson 7: Incidents, notification, and disposal Instruction + example + takeaway | L7-07 |
| 36. List recommended disposal methods for different PHI formats. | Lesson 7: Incidents, notification, and disposal Instruction + example + takeaway | L7-07, M09 |
| 37. Apply disposal best practices to pharmacy operations. | Lesson 7: Incidents, notification, and disposal Instruction + example + takeaway | L7-07, M09 |
| 38. Identify enforcement authorities under HIPAA and their roles. | Lesson 8: Enforcement and consequences Instruction + example + takeaway | L8-01 |
| 39. Describe the tiered civil penalty structure and apply it to pharmacy violations. | Lesson 8: Enforcement and consequences Instruction + example + takeaway | L8-02 |
| 40. List criminal offenses under HIPAA and their associated penalties. | Lesson 8: Enforcement and consequences Instruction + example + takeaway | L8-03 |
| 41. Apply criminal penalty categories to intentional misconduct scenarios. | Lesson 8: Enforcement and consequences Instruction + example + takeaway | L8-03 |
| 42. Explain the legal implications of HIPAA violations in state courts. | Lesson 8: Enforcement and consequences Instruction + example + takeaway | L8-04 |
| 43. Apply patient access and amendment response deadlines and permitted extensions. | Lesson 4: Patients, representatives, and others Instruction + example + takeaway | L4-05, L4-07 |
| 44. Apply accounting request deadlines, extensions, lookback periods, and fee rules. | Lesson 6: Accounting for disclosures Instruction + example + takeaway | L6-03 |
Sources for design
- Quality Matters published general standards and alignment
- Samford web template principles
- Samford content design library
- Samford Brand Identity Standards, Summer 2026: navy/red/gray and permitted Georgia/Tahoma fallbacks.