NLU PA Program — Didactic Year Handbook
Students may not use clinical experiences as content for a vlog, blog, podcast, social-media post, or other public-facing media.
17. Blogs and Written Publications
Students shall not publish identifiable patient information in blogs, essays, articles, newsletters, websites, online portfolios, social-media posts, case reports, presentations, or other publications unless the activity has been formally authorized and all applicable privacy, consent, institutional, ethical, and regulatory requirements have been satisfied. Educational assignments do not automatically authorize public dissemination of patient information.
18. De-Identification Does Not Eliminate Professional Responsibility
Students should not assume that removing a patient’s name alone makes information safe to disclose. A patient may be identifiable through combinations of age, location, occupation, clinical site, rare diagnosis, dates, photographs, unique circumstances, family relationships, treatment history, or other contextual information. Students should consult faculty or the appropriate clinical-site authority whenever uncertain whether information is sufficiently de-identified.
19. Student-to-Student Confidentiality
Students shall protect confidential information concerning classmates and may not disclose another student’s grades, examination performance, academic standing, remediation, health information, disability information, conduct matters, clinical evaluations, personal circumstances, or other protected information. FERPA and applicable NLU requirements govern student educational records.
20. Electronic Health Record Security
Students shall use only their assigned credentials; never share passwords; never access records outside their authorized educational role; log off or lock the workstation when leaving; protect screens from unauthorized viewing; never photograph or screenshot the EHR using a personal device; never copy patient information to unauthorized storage systems; follow clinical-site cybersecurity requirements; and immediately report suspected unauthorized access.
21. Personal Devices
Personal devices may not be used to store, photograph, record, or transmit PHI unless specifically authorized and secured according to applicable NLU and clinical-site requirements. Students are responsible for maintaining appropriate password protection, device security, encryption where required, screen-lock functions, software updates, and physical control of devices. Lost or stolen devices that may contain confidential information must be reported immediately.
22. Clinical Site Confidentiality
Students shall also protect proprietary and confidential information belonging to clinical affiliates, including internal clinical-site policies, non-public operational information, staff information, preceptor information, patient census information, security procedures, internal communications, and proprietary
Page 67 of 93
Powered by FlippingBook