Privacy training should be conducted regularly, with most healthcare institutions requiring an annual refresher. New employees should undergo comprehensive training during their orientation period, and ongoing education should be provided to keep staff updated on emerging threats and changes in regulations.