Healthcare IT Update

Don’t have a policy for employees who work with PHI? We’ve got what you need to write one quickly.

Your practice has tough decisions to make when allowing employees to handle patients’ private health information (PHI) while working from offsite locations.

You may require encryption, you may prohibit them from working on their personal laptops when dealing with PHI, or you may even only allow remote work when it’s done for emergency reasons. But no matter what, you need to communicate your privacy expectations to your employees.

Consider this sample document as a guide, contributed by Glenn Allen, information security director with Fairview Health Services in Minneapolis, Minn:

Security Considerations/Guidelines for the Remote Worker: When working remotely, we expose [organization name] to increased risk of privacy and security incidents and breaches. [Organization name] takes great care in protecting the privacy and…