Plan annual HIPAA and OSHA training for clinic staff

Help me build our clinic's annual compliance training plan. Clinic type and services: [e.g. "primary care with in-house lab and vaccines", "dental practice", "dermatology with procedures"] Staff roles and headcount: [e.g. providers 6, MAs 8, front desk 5, billing 3, remote staff 2] Topics required or already covered: [e.g. HIPAA privacy and security, OSHA bloodborne pathogens, hazard communication, fire safety, emergency preparedness, fraud waste and abuse, harassment prevention] Recent incidents or audit findings: [e.g. phishing click, needlestick, misdirected fax] Time and format available: [e.g. 30 minutes per month, staff meeting slots, online modules] How we track completion today: [DETAILS] Give me: 1. A topic-by-role matrix showing who needs what: e.g. bloodborne pathogens for anyone with occupational exposure, security awareness for everyone with system access, Medicare fraud, waste, and abuse for billing and providers where applicable. Mark any requirement I should verify as [CONFIRM REQUIREMENT]. 2. A 12-month calendar spreading topics into short sessions, with new-hire training within their first weeks and refreshers tied to real incidents. 3. For each topic: 3-5 learning objectives, a realistic clinic scenario to discuss (e.g. a family member asks for a patient's results at the front desk), and a short knowledge check. 4. Documentation to keep: sign-in sheets or completion records, content version, trainer, date, and retention period [CONFIRM]. 5. How to measure whether training worked (e.g. phishing test results, incident trends, audit checks). Return the matrix, calendar, and topic outlines. Check state-specific training requirements with our compliance lead.