Students shall not publish identifiable patient information in blogs, essays, articles, newsletters, websites, online portfolios, social-media posts, case reports, presentations, or other publications unless the activity has been formally authorized and all applicable privac y, consent, institutional, ethical, and regulatory requirements have been satisfied. Educational assignments do not automatically authorize public dissemination of patient information. 18. De- Identification Does Not Eliminate Professional Responsibility Students should not assume that removing a patient’s name alone makes information safe to disclose. A patient may be identifiable through combinations of age, location, occupation, clinical site, rare diagnosis, dates, photographs, unique circumstances, family relationships, treatment history, or other contextual information. Students should consult faculty or the appropriate clinical-site authority whenever uncertain whether information is sufficiently de - identified. 19. Student-to- Student Confidentiality St udents shall protect confidential information concerning classmates and may not disclose another student’s grades, examination performance, academic standing, remediation, health information, disability information, conduct matters, clinical evaluations, personal circumstances, or other protected information. FERPA and applicable NLU requirements govern student educational records. 20. Electronic Health Record Security Students shall use only their assigned credentials; never share passwords; never access r ecords outside their authorized educational role; log off or lock the workstation when leaving; protect screens from unauthorized viewing; never photograph or screenshot the EHR using a personal device; never copy patient information to unauthorized storag e systems; follow clinical - site cybersecurity requirements; and immediately report suspected unauthorized access. 21. Personal Devices Personal devices may not be used to store, photograph, record, or transmit PHI unless specifically authorized and secured according to applicable NLU and clinical-site requirements. Students are responsible for maintaining appropriate password protection, device security, encryption where required, screen-lock functions, software updates, and physical control of devic es. Lost or stolen devices that may contain confidential information must be reported immediately.
94
Powered by FlippingBook