County PHI definition
Examples of County PHI in a sentence
All persons that will be working with County PHI or PI must sign a confidentiality statement that includes, at a minimum, General Use, Security and Privacy Safeguards, Unacceptable Use, and Enforcement Policies.
Visitors to areas where County PHI or PI is contained shall be escorted and County PHI or PI shall be kept out of sight while visitors are in the area.
All systems involved in accessing, holding, transporting, and protecting County PHI or PI that are accessible via the Internet must be protected by a comprehensive intrusion detection and prevention solution.
The statement must be signed by the workforce member prior to access to County PHI or PI.
All systems processing and/or storing County PHI or PI must have a documented change control procedure that ensures separation of duties and protects the confidentiality, integrity and availability of data.
All workstations, laptops and other systems that process and/or store County PHI or PI must have critical security patches applied, with system reboot if necessary.
Faxes containing County PHI or PI shall not be left unattended and fax machines shall be in secure areas.
All workforce members who assist in the performance of functions or activities on behalf of County, or access or disclose County PHI or PI must complete information privacy and security training, at least annually, at Business Associate’s expense.
Servers containing unencrypted County PHI or PI must have sufficient administrative, physical, and technical controls in place to protect that data, based upon a risk assessment/system security review.
All systems providing access to County PHI or PI must display a warning banner stating that data is confidential, systems are logged, and system use is for business purposes only by authorized users.