2. Never share passwords. 3. Never access records outside their authorized educational role.
4. Log off or lock the workstation when leaving. 5. Protect screens from unauthorized viewing.
6. Never photograph or screenshot the EHR using a personal device. 7. Never copy patient information to unauthorized storage systems.
8. Follow clinical-site cybersecurity requirements. 9. Immediately report suspected unauthorized access.
NLU's published information-security materials similarly emphasize individual responsibility for information accessed through University systems and prohibit unauthorized use or disclosure of confidential information. (National Louis University)
21. Personal Devices
Personal devices may not be used to store, photograph, record, or transmit PHI unless specifically authorized and secured according to applicable NLU and clinical-site requirements.
Students are responsible for maintaining appropriate:
Password protection;
•
Device security;
•
Encryption where required;
•
Screen-lock functions; Software updates; and
•
•
Physical control of devices.
•
Lost or stolen devices that may contain confidential information must be reported immediately.
22. Clinical Site Confidentiality
Students shall also protect proprietary and confidential information belonging to clinical affiliates.
Students shall not disclose:
Internal clinical-site policies;
•
Powered by FlippingBook