HIPAA requires that training be conducted on a regular basis for all employees who handle patient information. For those involved in cancer care, it is recommended that training be conducted annually or whenever there are updates to HIPAA regulations or institutional policies.