PHI Safeguarding Practices

Guidelines for safeguarding PHI include, but not limited to:

PHI will be discussed with the A/R or PR only in private areas

PHI will be discussed with staff members on a need-to-know basis and in non-public areas only

telephone calls regarding PHI will be held in areas in which the conversation cannot be overheard

computer monitors will be positioned in a way that does not permit observation by anyone other than the A/R or PR

computer passwords will not be shared and will be recorded only in secure locations

PHI will be disclosed only by those staff members authorized to do so

access to fax machines will be limited to authorized staff

case records, mail, documentation, and other materials containing PHI will be maintained in locked or otherwise secure locations, away from the general public

staff members will wear appropriate agency-issued identification at all times

PHI will be discarded in appropriate secure containers.