Social Networking Safety Social engineering is quickly becoming the most common way the “bad guys” are breaking into systems. Our systems are good at keeping the bad guys out. But it’s much harder to keep them out once you’ve let them in by visiting infected websites, clicking on links or [...]

Secure PHI in Patient or Customer Care Areas Do not discuss PHI or customer details in common places such as cafeterias, elevators, parking lots, or outside the facility. Do not leave hard copy files unattended, for example on top of the desk. Review your company Clean Desk Policy. If you [...]

Check Devices to Ensure They Are in Compliance All desktops, laptops and other mobile computing devices must encrypted. This is to ensure that all devices that access ePHI will be compliance with the HIPAA Security Rule. Verify that your device has been been encrypted. If you are unsure, contact your [...]

Treat Paper Records & Electronic Data Equally Sensitive information on paper is the same as sensitive information on a computer. Both need to be protected from unauthorized access and should be treated with caution and discretion. In particular, Protected Health Information (PHI) in all forms (e.g. verbal, fax, paper, electronic) [...]

Logon ID Sharing user IDs and passwords is not advisable and may be a non-compliance with your company policy or local legislation. If you shared this information and someone used it to access ePHI, you will be held responsible for the actions that person took using your credentials. Do not [...]