STANDARD OF CONDUCT: SAFEGUARDING PHI

QUIZ: WHAT SHOULD I DO?

There may be times when you are unsure whether an activity or situation
is unethical or illegal. Certain words and phrases raise “red flags” that an action could violate our Code of Conduct. Specifically, all of the following phrases should send a warning signal to you:

YOUR RESPONSIBILITIES

• To protect our patients’ privacy by only using and disclosing the patient’s protected health information if it is necessary to do your job (for treatment, payment, or healthcare operations purposes, for example) and only using or disclosing the minimum amount of protected health information necessary to do your job.
• To always obtain a patient’s authorization to use or disclose the patient’s protected health information if the use or disclosure is not for treatment, payment, or healthcare operations or unless the use or disclosure is otherwise permitted under state or federal privacy laws and regulations.
• To be sensitive to your surroundings when you are sharing protected health information and to always speak in a low and quiet tone.
• To always properly dispose of protected health information in the designated blue shred bins.
• To always report any impermissible or improper use or disclosure of protected health information to the Office of Corporate Compliance as soon as possible.
• To never share your passwords or credentials with anyone for any reason.