Chapter Summary

Handling PHI

• PHI is protected by physical and technical safeguards.

• Place computers where only personnel can view the screen and use privacy screens when you can’t place the computer in a restricted location.

• Place printers and fax machines out of public areas.

• Ask users to quickly pick up printed documents containing PHI.

• Activate the locking screensaver on a computer.

• When staff schedules permit, use a time lockout on user accounts.

Applying Proper Communication Methods

• Ensure email containing PHI is encrypted.

• Never use IM in a healthcare environment. Secure chat might be approved for use by the security officer. EHR/EMR information systems sometimes have a messaging system that might be secure enough for use.