Purpose. Workforce members use, request and disclose only the minimum patient information needed to do the task in front of them.
Access by role. System access is granted by job role. Front desk staff see scheduling and demographics; billing staff see what claims require; clinical staff see the chart for patients in their care.
Looking up records. Opening a record for any reason other than treatment, payment or operations is prohibited, including your own record, a family member, a coworker or a public figure. Access is logged and reviewed monthly.
Conversations. Discuss patient information in private areas where possible, at a lowered voice at the desk, and never in elevators, break rooms or on social media.
Annual attestation. Every workforce member confirms this policy each year as part of annual privacy training.