BDS Confidentiality Training

 

Security (1 of 5)

If you are keeping track, you know that the Security section is the last one that covers new content. Although you are almost done, pay particular notice to this section.  It reviews policies that impact your everyday work.

In this section you will learn to:

  • Describe the "Need to Know" concept.
  • Comply with the password policy.
  • Use proper e-mail, fax, cell phone and computer safeguards.

  • Secure data in the office environment.

The foremost idea in data security is the "Need To Know" concept.

Need To Know is the department's rule used to decide what kind of access to certain health information an employee needs in order to do his or her job.  

The  "Need To Know" concept is based on the professional work requirements so that access to confidential information is limited to that needed for employees to perform their job functions. For example, a person who provides transportation for a client does not need to know the client's medical history when it does not affect the transportation.

A word about passwords.

When you go to your work station and crank up your computer using your password you are using security that is based on "need to know". 

NEVER share your passwords with anyone else.  Change your password frequently and do not use a family name or other easy to figure out password to ensure no one knows your passwords.

Because BDS requires that you have access only to the information you need to do your job, your password is issued based on security levels that are established according to what each employee will need-to-know in order to do his or her work. Even if you do have access to information not necessary for your work, you should not access the data.

While away from the computer, remember the old World War II saying that loose lips sink ships. Never discuss confidential information in places where you could be overheard by co-workers or visitors who are not authorized to have the information.

If you are using cell phones, 2-way radios, e-mail, faxes, answering machines, and other electronic forms of communication, do not send confidential information except when there are safeguards in place to prevent unauthorized access.

Next you will review some of specific policies in transmitting confidential data.

Back        Next

 

Modules
General Rule - Informed Approval - Exceptions - Security - Case Example - Final Steps
Reference Materials
Policy and Definitions - Forms

Credits