NLU PA Program — Didactic Year Handbook
with the appropriate University and clinical-affiliate officials regarding required reporting, investigation, mitigation, and follow-up.
7. Business Associate Provisions
Where the University or another educational institution is determined by the U.S. Department of Health and Human Services, Office for Civil Rights, or another authorized federal or state agency, court, or administrative tribunal to be a HIPAA Business Associate, NLU will comply with the applicable conditions established through the affiliation agreement and applicable law, and students shall follow any additional privacy, security, documentation, or information-handling requirements communicated by NLU or the clinical affiliate.
8. Minimum Necessary Access
Students shall use the minimum necessary information required to accomplish an authorized educational or clinical purpose: accessing only records they are authorized to access; reviewing only information relevant to their assigned responsibilities; avoiding access to records of family members, friends, acquaintances, themselves, or other individuals unless specifically authorized for an educational purpose; logging out of electronic health records when finished; protecting passwords and authentication credentials; and never sharing usernames, passwords, access cards, tokens, or other credentials.
9. Classroom and Didactic Confidentiality
Confidentiality requirements apply during didactic education. Students shall not disclose identifiable information discussed during case conferences, classroom discussions, problem-based learning, small- group activities, patient case presentations, simulation, standardized patient encounters, skills laboratories, interprofessional education, or other educational activities. When patient cases are used for educational purposes, students shall use only information authorized for educational use and avoid unnecessary patient identifiers, and shall not discuss identifiable patient information in hallways, elevators, cafeterias, public transportation, restaurants, social gatherings, or other locations where unauthorized individuals may overhear.
10. Clinical Confidentiality
During SCPEs, students shall comply with HIPAA, applicable state privacy laws, NLU and PA Program requirements, and all clinical-affiliate confidentiality and privacy policies. Students shall protect patient information during patient interviews, physical examinations, chart review, EHR access, documentation, case presentations, sign-out activities, consultations, patient education, and communication with healthcare professionals, and shall not discuss identifiable patient information with individuals not directly involved in the patient’s care or the student’s authorized educational experience.
11. Social Media Policy
Students shall not post, publish, transmit, distribute, or otherwise disclose confidential or protected information through social media or online platforms (including but not limited to Facebook, Instagram, TikTok, X, Snapchat, LinkedIn, YouTube, Reddit, blogs, podcasts, online discussion boards, private social-
Page 65 of 93
Powered by FlippingBook