Examples of County PHI in a sentence
All workforce members who assist in the performance of functions or activities on behalf of County, or access or disclose County PHI or PI must complete information privacy and security training, at least annually, at Business Associate’s expense.
All persons that will be working with County PHI or PI must sign a confidentiality statement that includes, at a minimum, General Use, Security and Privacy Safeguards, Unacceptable Use, and Enforcement Policies.
County PHI or PI in paper form shall not be left unattended at any time, unless it is locked in a file cabinet, file room, desk or office.
If County PHI or PI is stored in a database, database logging functionality must be enabled.
Visitors to areas where County PHI or PI is contained shall be escorted and County PHI or PI shall be kept out of sight while visitors are in the area.
All systems involved in accessing, holding, transporting, and protecting County PHI or PI that are accessible via the Internet must be protected by a comprehensive intrusion detection and prevention solution.
All systems providing access to County PHI or PI must display a warning banner stating that data is confidential, systems are logged, and system use is for business purposes only by authorized users.
Servers containing unencrypted County PHI or PI must have sufficient administrative, physical, and technical controls in place to protect that data, based upon a risk assessment/system security review.
All workstations, laptops and other systems that process and/or store County PHI or PI must have critical security patches applied, with system reboot if necessary.
All systems processing and/or storing County PHI or PI must have a documented change control procedure that ensures separation of duties and protects the confidentiality, integrity and availability of data.