Veterans Desk · Florida 501(c)(3) Nonprofit · Independent & Veteran-Built

Veterans Desk

Copay Relief →
DCSP Hub · Subspecialty 0
9

HIPAA Training & Workforce Privacy Education

The discipline that keeps every workforce member trained and current · 9 roles

NAMSS

CPCS · CPMSM

NCQA

Credentialing Standards

URAC

Provider Credentialing

CAQH

ProView Platform

State Boards

Medical Board Credentialing

DCSP Hub .

State Privacy Law Trainer (CCPA · SHIELD · MHMDA · TDPSA)

A State Privacy Law Trainer specializes in training healthcare workforces on the state privacy laws that increasingly layer on top of HIPAA — California’s CCPA/CPRA, New York’s SHIELD Act, Washington’s My Health My Data Act (MHMDA), Texas Data Privacy and Security Act (TDPSA), Connecticut Data Privacy Act, Colorado Privacy Act, Florida Digital Bill of Rights, and the growing roster of state privacy laws. State privacy expansion has accelerated rapidly. Practices operating in multiple states need workforce training on each applicable state law alongside HIPAA.

HOW THIS WORK HAPPENS

State privacy law trainer work happens in three places: as a hospital or health-system employee, as a contractor working through a practice management or services company, or as an independent business owner. This page covers all three so you can choose the path that fits your life.

Veterans Desk supports the third path. We are a Florida 501(c)(3) membership platform full of opportunities — not an employer, not a placement agency. We list independent professionals so the practices that need them can find them. Your business. Your contracts. Your rates. Your decisions.

MEMBER ACKNOWLEDGMENT

Membership in Veterans Desk's Independent Members Directory is built on these understandings about your business.

Fifteen points. Read carefully. This is the agreement.
01
You set your own rates. Veterans Desk does not suggest, publish, recommend, or facilitate the sharing of rate information between members.
02
You bill your own clients and collect your own payment. Veterans Desk does not invoice, collect, hold, distribute, or process payment between you and your clients.
03
You hold and maintain current professional liability and errors-and-omissions insurance appropriate to your specialty. Veterans Desk does not insure you, indemnify you, or provide coverage of any kind.
04
You handle your own taxes as an independent business. Veterans Desk does not withhold, report, file, or remit taxes for you. You are responsible for federal, state, and local tax obligations including estimated quarterly payments.
05
You sign your own contracts directly with your clients. Veterans Desk is never a party to, signatory of, or guarantor of your client agreements, and Veterans Desk does not negotiate, review, or approve your contract terms.
06
When your work touches Protected Health Information (PHI), you execute a Business Associate Agreement (BAA) directly with each client before beginning work. Veterans Desk is never a party to your BAAs, and Veterans Desk’s website never touches, stores, or transmits PHI.
07
You hold and maintain all federal, state, and local business licenses, registrations, and certifications your business and work require. Veterans Desk does not verify licenses on your behalf or vouch for your licensure status.
08
You complete the continuing education your credential requires and maintain current documentation. Veterans Desk does not track CE on your behalf, report CE to credentialing bodies, or guarantee that your CE meets any specific requirement.
09
You carry full professional responsibility for the quality, accuracy, and timeliness of your work product. Errors, omissions, missed deadlines, and quality disputes are between you and your client. Veterans Desk does not mediate, intervene, indemnify, or carry any liability for your work.
10
You market your own business and represent yourself accurately to clients. You do not represent yourself as employed by, certified by, endorsed by, or operating under the authority of Veterans Desk. You may accurately state that you are a listed member of Veterans Desk’s Independent Members Directory.
11
Your professional relationships are with your DCP clients. You do not have a direct service relationship with veterans through Veterans Desk, and Veterans Desk does not refer veterans to you as patients or clients.
12
You maintain your own client records, working files, and business records on systems and tools you control. Veterans Desk does not host, back up, store, or have access to your client files or business data.
13
Your membership in the Independent Members Directory is conditional on maintaining current credentials, insurance, licenses, and good standing. Veterans Desk may suspend or terminate your directory listing if these standards lapse.
14
Your membership fee pays for your listing and the educational resources Veterans Desk provides. It does not buy referrals, leads, work, or placement, and is not refundable based on the work you do or do not receive.
15
You are a member of an independent professional directory. You are not an employee, contractor, agent, partner, joint venturer, or representative of Veterans Desk. Veterans Desk does not direct, supervise, control, schedule, or assign your work.
What This Really Means

Here's what running your own business actually means, in plain words.

The same fifteen points — explained the way a friend would explain them.

01

You decide what to charge.

You research what other professionals in your specialty charge. You look at job boards. You ask peers. You decide what your work is worth, and you tell your clients that number. Veterans Desk does not tell you what to charge. We do not share rate information. That keeps us out of antitrust trouble and keeps you free to price your work the way you choose.

02

You send the bill. You collect the money.

Every month, you send your client an invoice. The client pays you directly — usually by ACH bank transfer or check. Veterans Desk does not touch the money. We never see your invoices. We never collect for you. Money flows from client to you. Period.

03

You buy your own insurance.

Professional liability insurance protects you if a client says your work cost them money. Errors and omissions insurance protects you if you make a mistake in your work product. Every working DCSP needs both. You shop for it. You pay for it. You keep it current. Veterans Desk does not insure you, and the directory does not list you as covered by us.

04

You pay your own taxes — four times a year.

As an independent business, you pay estimated taxes every quarter — April, June, September, and January. You file a Schedule C with your tax return (or your LLC’s return if you set up an LLC). Veterans Desk does not withhold anything. We do not report your income to the IRS. You are responsible for tracking your income, your expenses, and your tax payments. A bookkeeper or CPA pays for itself.

05

You sign your own contracts.

Every client gives you a contract — sometimes called a Master Service Agreement or a Statement of Work. You read it. You sign it. If something looks off, you take it to your own attorney. Veterans Desk does not read your contracts, does not negotiate them, does not approve them, and is not a party to them.

06

You sign a BAA with every client before you start.

When your work touches information about real patients — their names, dates of birth, diagnoses — that information is called PHI. The law says you have to protect it. Before any client lets you near their patient information, you sign a paper called a Business Associate Agreement, or BAA. Every client. Every time. Veterans Desk’s website never touches PHI — we educate you about it, that’s it.

07

You hold your own business licenses.

Some states require a business license to operate. Some cities require a local one. You research what your state and city require, and you hold whatever licenses apply. You keep them current. Veterans Desk does not verify your licenses for you — the verification badge on your directory profile reflects what you upload, not what we check with the state.

08

You keep your credentials and CE current.

Your professional credential needs continuing education hours to stay active. You complete the CE. You track the hours. You report them to your credentialing body. Veterans Desk does not report for you. We do not guarantee your CE is enough — that’s between you and your credentialing body.

09

You own the quality of your work.

If you make a mistake in your work, the client may lose money. They may ask you to fix it. They may charge you for the loss. They may not hire you again. Your insurance and your reputation handle this — not Veterans Desk. We are not in the middle of your work disputes. Build clean files. Communicate well. Hit your deadlines.

10

You market yourself accurately.

You can tell clients: “I am a listed member of Veterans Desk’s Independent Members Directory.” That is accurate. You cannot tell clients: “I work for Veterans Desk” or “Veterans Desk certified me.” That is not accurate. Stick to “listed member of the directory.”

11

Your clients are DCP practices. Veterans are not your clients.

You serve the doctor’s practice or the clinic — the DCP. The veteran is the DCP’s patient, not yours. Veterans Desk does not refer veterans to you. The chain goes: Veterans Desk lists DCPs. DCPs hire DCSPs. DCSPs serve DCPs. You are two steps removed from the patient, which is exactly where you should be.

12

You keep your own records.

Your client files, your invoices, your work product, your tax records — all of it lives on systems you control. Veterans Desk does not host your work. We do not back up your data. If your laptop dies, that is on you to recover from. Use cloud backup. Treat your business like a real business.

13

Your directory listing is conditional, not permanent.

If your credential lapses, your listing pauses. If your insurance expires, your listing pauses. Membership is a standing — you maintain it by keeping everything current. We send you reminders before things lapse. The directory only works if every member listed is actually current.

14

Your membership fee pays for listing — not for leads.

Veterans Desk does not promise you work. The fee you pay covers your spot in the directory and the educational resources we publish. Whether you win the work after that depends on you — your profile, your responsiveness, your rates, your references. Membership is an opportunity, not a guarantee.

15

You are a member. We are a platform. That is the whole relationship.

Veterans Desk does not employ you. We do not contract with you. We do not represent you. We list you. You operate your business. The line between us is clean and clear — and the clean line is what protects both of us.

What this role involves

State Privacy Law Trainers develop and deliver training on specific state privacy laws. They train workforces on CCPA requirements for California operations. They train on SHIELD requirements for New York operations. They train on MHMDA for Washington-state operations. They train on TDPSA for Texas. They train on the dozens of state laws as practices operate in different states.

Each state law has its own scope, requirements, and enforcement mechanisms. CCPA covers broader categories than HIPAA. SHIELD has specific data security requirements. MHMDA covers consumer health data outside HIPAA. TDPSA has its own consent requirements. Trainers know each state law specifically.

The work intersects with state regulatory compliance work closely. State Regulatory Compliance Specialists monitor state law changes; Privacy Law Trainers translate state law requirements into workforce education.

THE HONEST DESCRIPTION

The State Privacy Law Trainer role rewards multi-state regulatory expertise combined with training delivery. Members who do well in this work enjoy mastering specific state privacy frameworks, take pride in workforces who understand state law requirements alongside HIPAA, and find satisfaction in keeping practices compliant across multi-state operations.

The core activities

1

Develop state-specific privacy law training

Build training covering specific state privacy laws — CCPA/CPRA, SHIELD, MHMDA, TDPSA, CTDPA, CPA, others.

2

Deliver state privacy law training to workforces

Train workforces on the state laws applying to their work locations and patient interactions.

3

Update training as state laws evolve

Maintain content currency as state laws are amended and new state laws enacted.

4

Coordinate with state regulatory compliance work

Work with state regulatory compliance specialists on coordinated training and compliance programs.

 

5

Support multi-state practice training needs

Develop training programs that cover the specific state laws applying to multi-state practices.

Where this role appears in the field

In a hospital legal or compliance department

Hospital state privacy trainers work within legal or compliance departments, especially for systems operating across multiple states.

In a privacy compliance or training services company

Companies offering multi-state privacy training services.

As an independent contractor

Multi-state practices and telehealth practices needing state privacy law training hire independent specialists.

FEDERAL PAYER WORKFLOW
VA CCN, TRICARE & CHAMPVA authorization workflow

VA practices and VA Community Care Network providers serving veterans across state lines must address state privacy laws alongside federal payer requirements. Trainers supporting VA CCN multi-state practices need federal-plus-state privacy training expertise.

Federal payer privacy at VA, TRICARE, and CHAMPVA does not preempt state privacy law for community providers. Multi-state federal payer practices need state privacy training alongside federal payer training.

Your roadmap to becoming an independent State Privacy Law Trainer (CCPA · SHIELD · MHMDA · TDPSA)

This is the step-by-step path. Follow each step in order.

Step 01
Build HIPAA and state privacy law expertise

Most state privacy trainers come from privacy compliance backgrounds with state law specialization.

 

Step 02
Consider IAPP CIPP/US credential

International Association of Privacy Professionals offers Certified Information Privacy Professional / United States credential covering federal and state privacy law.

Step 03
Develop training delivery skills alongside regulatory expertise

State privacy training requires both regulatory mastery and training delivery skills.

Step 04
Set up your business

Register an LLC. Get an EIN. Open a separate business bank account.

Step 05
Get professional liability insurance

Errors and omissions coverage.

Step 06
Sign HIPAA Business Associate Agreements

Every client signs a BAA.

Step 07
Find your first client

Multi-state practices and telehealth practices needing state privacy training are natural first clients.

Step 08
List in the Veterans Desk Independent Members Directory

Position yourself around specific state laws where you have deep expertise.

Step 09
Build your book of business

State privacy trainers often work with multiple multi-state practice clients on ongoing state law training.

Education & experience pathways

Members exploring this role typically come into the work through one of these learning paths:

Privacy compliance professional transitions
Compliance professionals with state privacy law focus who add training delivery skills.
Healthcare legal backgrounds
Healthcare paralegals and attorneys with state privacy practice experience and training aptitude.
Military MOS adjacent paths
Military legal and training roles translate well — 27D (Paralegal Specialist with training experience), military JAG support roles with training responsibilities.
THE SKILL THAT DISTINGUISHES STRONG PROFESSIONALS

State Privacy Law Trainers who grow fastest are the ones who develop deep expertise in 3-5 specific state laws paired with strong training delivery skills. Generalist knowledge of all 50 states is impossible to maintain; deep expertise in CCPA + SHIELD + MHMDA + TDPSA + CPA (for example) creates premium positioning.

The realities of the work

The State Privacy Law Trainer role is rapidly growing as state privacy laws proliferate. Demand will continue increasing as more states enact privacy laws.

It is remote-work friendly for content development and virtual delivery. Compensation is at the senior specialty training level reflecting the multi-state regulatory expertise required.

Income — research the range

Veterans Desk does not publish specific income figures because numbers vary based on credential, geographic market, employment type, specialty focus, and experience. Here are the authoritative sources to research current income data:

BLS — Training and Development Specialists

BLS occupational data.

bls.gov/ooh/business-and-financial/training-and-development-specialists.htm
IAPP Compensation Survey

International Association of Privacy Professionals publishes privacy professional compensation data.

iapp.org
HCCA Compensation Survey

HCCA compensation data with privacy specialty breakouts.

hcca-info.org

How to know if this role fits you

The State Privacy Law Trainer role is a good fit for members with multi-state regulatory aptitude and training delivery skills. Members who can master specific state privacy frameworks deeply. Members who enjoy emerging regulatory specialty work. For the right person, especially with IAPP credentials and state law focus, it offers one of the fastest-growing privacy specialty paths.

About this content. Veterans Desk is a Florida 501(c)(3) nonprofit membership platform. This page is educational and does not constitute medical, legal, financial, or placement advice. HIPAA training requirements, state privacy laws, and workforce education standards vary by setting, jurisdiction, and regulatory framework. Always confirm current requirements with the relevant authority before designing or delivering training programs. Veterans Desk does not employ, place, refer, or supervise HIPAA training professionals. All members listed in the Independent Members Directory operate their own independent businesses, set their own rates, sign their own contracts, and carry their own insurance.