Does the annual HIPAA training module cover both the privacy rule and the security rule?

Yes, the HIPAA training module cover both the privacy rule and the security rule.

Yes.  The HIPAA includes the Hitech, which covers the security rules.