Question: Does the privacy rule mandate that we keep our training documentation, like sign-in sheets and handouts, on file? Must we also keep the training records for each of our employees? Florida Subscriber Answer: "Yes," you must hold on to your training documentation and employee records, says Mic Sager, associate compliance officer for Olympic Medical Center in Port Angeles, WA. The Bottom Line: The privacy rule demands that "you document all your HIPAA training," Sager explains. And it states you have to keep any document required by the rule for six years, he reminds.