Healthcare Law and Ethics Training Course

Duration 10 days 20 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Healthcare Managers, Clinical Governance Leads and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-HSM-041

Before you join: Participants should have professional experience in healthcare, social care, public health, health insurance or a related support function.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Healthcare managers make decisions that affect patient rights, clinical safety, workforce conduct, public trust and organisational liability. A delayed disclosure, invalid consent process, inappropriate information access or poorly managed complaint can harm patients and trigger regulatory action, litigation, reputational damage and service disruption. Leaders need a practical way to identify legal duties, test ethical choices and document defensible decisions when clinical, financial and operational pressures conflict.

This course examines the legal and ethical aspects of healthcare through the decisions made in hospitals, primary care networks, public health agencies, insurers, NGOs and social care providers. Participants examine sources of health law, professional accountability, informed consent, capacity, privacy, records, patient safety, safeguarding, equity, research governance, digital health, procurement and regulatory compliance. They apply the IRAC method, the four-principles approach, risk assessment and structured incident review to realistic management cases. The course distinguishes universal duties from requirements that vary by jurisdiction and shows participants how to identify when specialist legal advice is required.

Teaching combines short instructor briefings with case analysis, facilitated group work, complaint and incident simulations, document review and application planning. Across the course, participants develop an ethics and legal risk register, decision records, escalation routes and compliance controls relevant to their services. They leave with a completed Healthcare Legal and Ethical Governance Plan that can be adapted for use with their own policies, committees, teams and service risks. Participants receive a certificate of completion after the ten-day programme.

The course is suited to managers and professionals who influence healthcare policy, service delivery, quality, governance, information handling or patient-facing operations. It is especially valuable where staff must balance patient autonomy, safety, confidentiality, access and organisational accountability.

What you will be able to do

  • Apply the IRAC method to analyse healthcare legal issues and recommend defensible actions
  • Assess ethical dilemmas using the four-principles approach and documented decision criteria
  • Design informed consent and capacity assessment processes for patient-facing services
  • Develop privacy, confidentiality and records-management controls aligned with legal duties
  • Investigate incidents, complaints and safeguarding concerns using structured governance methods
  • Construct a healthcare legal and ethical risk register with accountable control owners
  • Evaluate digital health, research and third-party arrangements for legal and ethical risks
  • Present a complete Healthcare Legal and Ethical Governance Plan for management approval

Benefits of attending

For you

  • Greater confidence identifying when a service decision requires legal review
  • A repeatable method for documenting ethical decisions under operational pressure
  • Stronger capability to challenge unsafe consent, privacy and disclosure practices
  • Practical evidence for leading governance, quality or compliance responsibilities
  • A completed governance plan for discussion with senior management

For your organisation

  • More consistent handling of consent, capacity, confidentiality and patient rights
  • Earlier identification of legal exposure before incidents become formal claims
  • Better documented decisions for regulators, auditors, complainants and insurers
  • Clearer escalation routes between operational managers, clinicians and legal advisers
  • Stronger controls for digital health, research, suppliers and information sharing

Course modules

20 modules over 10 days

Participants can analyse a healthcare legal issue and identify appropriate actions and escalation.

  • Sources of healthcare law: statutes, regulations, cases, contracts and professional codes
  • Jurisdictional hierarchy and conflicts between national, regional and local requirements
  • IRAC method for structuring legal issue analysis and written advice
  • Duty of care, standard of care, causation, harm and remedies
  • Public, private and mixed health-system responsibilities mapped to service delivery
  • Legal counsel escalation thresholds and privilege boundaries during operational decisions

Participants can assess ethical dilemmas and document a reasoned management decision.

  • Four-principles approach: autonomy, beneficence, non-maleficence and justice
  • Rights-based, consequentialist and duty-based reasoning for healthcare choices
  • Ethical conflict identification between patient preferences, safety and scarce resources
  • Stakeholder mapping for patients, families, clinicians, funders and communities
  • Decision logs recording options, reasons, dissenting views and accountability
  • Ethics committee referral criteria for complex or contested cases

Participants can define governance accountabilities for legal and ethical oversight.

  • Board, executive and clinical governance responsibilities for patient protection
  • Three-lines model applied to healthcare risk and compliance oversight
  • Terms of reference for ethics, quality, safety and audit committees
  • Delegations of authority for clinical, financial and information decisions
  • Accountability matrices linking duties, controls, evidence and assurance
  • Legal and ethical risk register structure with named control owners

Participants can design consent processes that support valid and documented patient choices.

  • Elements of valid consent: capacity, information, voluntariness and documentation
  • Material risk disclosure and reasonable patient information requirements
  • Capacity assessment triggers, evidence standards and reassessment intervals
  • Supported decision-making, substitute decision-makers and best-interests processes
  • Consent requirements for treatment, procedures, photography and information sharing
  • Interpreter use and accessible communication for meaningful patient participation

Participants can establish lawful and ethical controls for health information handling.

  • Confidentiality duties arising from care relationships, contracts and professional codes
  • GDPR principles applied to health data collection and processing
  • Lawful bases, consent limits and special-category health information safeguards
  • Role-based access controls, minimum necessary access and audit trails
  • Permitted disclosures for care, safeguarding, public health and legal orders
  • Privacy impact assessments for new services, systems and data flows

Participants can manage records requests, retention obligations and defensible disclosures.

  • Clinical record standards for accuracy, timeliness, authorship and amendments
  • Retention schedules based on patient category, service type and legal requirements
  • Patient access requests, identity verification and redaction decision-making
  • Disclosure logs recording recipients, authority, scope and release rationale
  • Managing third-party requests from families, employers, police and insurers
  • Legal holds preventing destruction of records relevant to disputes

Participants can connect patient safety controls with legal duties and liability exposure.

  • Clinical negligence elements applied to preventable patient harm claims
  • Systems approach to adverse events, near misses and unsafe conditions
  • Root cause analysis boundaries and legal review of investigation reports
  • Open disclosure principles following harm, uncertainty and patient complaints
  • Quality indicators supporting evidence of safe and effective care
  • Corrective action plans with deadlines, owners, measures and assurance

Participants can address professional conduct issues through fair and accountable processes.

  • Professional licensure, scope of practice and delegation boundaries
  • Mandatory reporting duties for impaired, unsafe or unethical practitioners
  • Fitness-to-practise concerns, evidence handling and procedural fairness
  • Workplace investigations involving harassment, discrimination and retaliation claims
  • Whistleblowing protections, confidential reporting channels and non-retaliation controls
  • Credentialing and privileging records for clinical workforce assurance

Participants can assess access and allocation decisions for fairness and legal risk.

  • Non-discrimination duties in admission, treatment, employment and service access
  • Equity impact assessment for eligibility criteria and service redesign
  • Priority-setting criteria: clinical need, benefit, urgency and fairness
  • Reasonable accommodation for disability, language, culture and religious needs
  • Managing waiting lists through transparent, documented clinical prioritisation
  • Appeal routes for disputed eligibility, funding and treatment decisions

Participants can respond lawfully to safeguarding concerns while respecting individual rights.

  • Safeguarding indicators for children, older adults and dependent adults
  • Mandatory reporting thresholds, referral routes and recordkeeping requirements
  • Balancing confidentiality with prevention of serious harm or abuse
  • Multi-agency information sharing using documented necessity and proportionality
  • Immediate safety planning, escalation decisions and management oversight
  • Trauma-informed communication during disclosures, interviews and follow-up

Participants can evaluate public health interventions against legality, necessity and proportionality.

  • Public health authority for surveillance, reporting, inspection and intervention
  • Necessity and proportionality tests for restrictions on individual liberty
  • Communicable disease reporting, contact tracing and confidentiality limits
  • Emergency powers, due process safeguards and time-limited restrictions
  • Risk communication duties during outbreaks, recalls and public alerts
  • Community engagement methods for legitimate and equitable public health action

Participants can assess legal and ethical risks in digital health service models.

  • Telehealth consent, identity verification and cross-border practice requirements
  • Clinical accountability where digital tools influence care decisions
  • Algorithmic bias testing for patient selection, risk scoring and triage
  • Human oversight requirements for automated recommendations and alerts
  • Cybersecurity incident response for compromised health information systems
  • Vendor contracts covering data ownership, security, liability and exit

Participants can apply research governance requirements to participant protection and study oversight.

  • Research versus service evaluation classification and governance consequences
  • Ethics review requirements for participant risk, recruitment and consent
  • ICH Good Clinical Practice principles for trial oversight and documentation
  • Vulnerable participant protections, assent and proxy consent arrangements
  • Adverse event reporting, protocol deviations and investigator responsibilities
  • Data monitoring, publication ethics and conflicts of interest disclosure

Participants can identify governance duties for medicines, devices and clinical products.

  • Medication management controls from prescribing through administration and monitoring
  • Off-label use decisions, documentation and patient communication requirements
  • Medical device incident reporting, traceability and recall management
  • Cold-chain failures, product quarantine and escalation decision criteria
  • Pharmacovigilance reports for suspected adverse drug reactions and safety signals
  • Procurement specifications addressing safety, regulatory status and lifecycle support

Participants can manage legal and ethical risks arising from external relationships.

  • Due diligence for suppliers, referral partners and outsourced clinical providers
  • Contract clauses for quality, confidentiality, audit rights and incident reporting
  • Conflicts of interest registers, declarations and recusal procedures
  • Gifts, sponsorships and industry relationships assessed against professional duties
  • Anti-bribery controls for purchasing, referrals and charitable funding
  • Performance monitoring of outsourced services against safety and compliance terms

Participants can manage complaints and claims using fair, timely and evidence-based processes.

  • Complaint intake, triage, acknowledgement and response-time standards
  • Investigation plans defining allegations, evidence sources and responsible reviewers
  • Patient-centred communication during complaint handling and resolution discussions
  • Mediation, conciliation and early resolution of healthcare disputes
  • Claims notification thresholds, insurer communication and evidence preservation
  • Lessons-learned reports linking complaints to service improvement actions

Participants can investigate serious concerns and escalate findings through appropriate governance routes.

  • Incident severity classification using harm, recurrence and control-failure criteria
  • Timeline analysis separating facts, assumptions, decisions and missed signals
  • Just culture principles for accountability, learning and disciplinary boundaries
  • Interview planning, witness support and contemporaneous evidence collection
  • Escalation protocols for serious harm, suspected crime and regulatory notification
  • Management reports presenting findings, actions, owners and residual risks

Participants can build a monitoring programme that tests legal and ethical controls.

  • ISO 31000 risk treatment options linked to healthcare control design
  • Compliance obligations register with sources, owners, evidence and review dates
  • Control testing methods: walkthroughs, sampling, observation and document review
  • Audit findings graded by impact, likelihood and remediation urgency
  • Key risk indicators for privacy, consent, complaints and patient safety
  • Assurance reporting for executives, boards and governance committees

Participants can prepare governance arrangements for legally and ethically difficult emergencies.

  • Crisis governance roles, decision rights and legal adviser access
  • Ethical triage frameworks for constrained beds, staff and critical supplies
  • Emergency communications balancing transparency, privacy and public reassurance
  • Documentation standards for rapid decisions under incomplete information
  • Continuity arrangements for essential services and vulnerable patient groups
  • Post-incident review addressing rights impacts, lessons and policy revision

Participants can build, review and present a complete Healthcare Legal and Ethical Governance Plan.

  • Service profile defining patients, decisions, information flows and regulatory duties
  • Legal and ethical risk register prioritised by impact and likelihood
  • Consent, privacy, safeguarding and incident controls assigned to accountable owners
  • Escalation map connecting frontline concerns, committees, executives and legal advisers
  • Assurance schedule combining control tests, indicators, audits and management reviews
  • Management presentation defending priorities, resources, timelines and residual risks

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Healthcare legal issue analysis template
  2. Ethical decision record template
  3. Healthcare legal and ethical risk register
  4. Consent and capacity process checklist
  5. Health information disclosure checklist
  6. Healthcare Legal and Ethical Governance Plan

Who should attend

  • Healthcare Managers — need defensible decisions on service delivery, risk and patient rights
  • Clinical Governance Leads — oversee quality, safety, accountability and incident learning
  • Hospital Administrators — manage operational duties, complaints, records and regulatory exposure
  • Quality and Patient Safety Managers — connect safety investigations with legal and ethical duties
  • Health Information Managers — control confidential records, access requests and data disclosures
  • Public Health and NGO Programme Managers — balance population health duties with individual rights

Skills and tools covered

Healthcare legal analysisEthical decision-makingInformed consent governanceHealth information privacyClinical risk managementRegulatory compliance planning

Tools and standards

IRAC Method, Four-Principles Approach, GDPR, ISO 31000

How the course runs

Training methodology

The programme uses short briefings to establish legal and ethical principles, followed by case work drawn from hospital, primary care, public health and social care settings. Participants analyse consent disputes, privacy breaches, complaints, resource-allocation choices and safety incidents using structured methods. Group exercises test competing stakeholder positions, while simulations develop escalation, documentation and communication skills. Facilitated application planning connects each topic to participants' own policies, committees, risks and service decisions. The final capstone brings the methods together in a management-ready governance plan.

Requirements and prerequisites

Participants should have professional experience in healthcare, social care, public health, health insurance or a related support function. They should be familiar with how their organisation delivers services, manages patients or clients, records information and assigns management responsibilities. Prior legal training is not required, and participants do not need to be lawyers, clinicians or compliance specialists. The course uses legal concepts in a management context and addresses jurisdictional variation through structured comparison. Participants should bring examples of relevant policies, recurring decisions or governance concerns where organisational rules allow.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants need experience in healthcare, social care, public health, health insurance or a related function. No legal qualification is required; legal concepts are taught for management and governance use.

Participants should bring examples of policies, recurring decisions, incidents or governance concerns that they may discuss without breaching confidentiality. A laptop is useful for developing course templates and the capstone plan.

It suits healthcare managers, clinical governance staff, quality leaders, administrators, information managers and public health programme managers. It also supports professionals moving into compliance, risk or patient safety responsibilities.

Compliance courses often focus on regulatory obligations and audit controls, while clinical ethics courses may concentrate on bedside dilemmas. This programme joins legal duties, ethical reasoning, governance processes and operational management decisions.

Participants can use the issue-analysis template, decision record, risk register and escalation map for active service concerns. The capstone plan provides a structured basis for improving local governance arrangements.

Each training day runs from 08:30 to 16:30 and provides about 6.5 contact hours. The first week establishes core legal, ethical and patient-rights methods, while the second week applies them to risk, compliance, emergencies and the capstone plan.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.