Workforce Privacy & Security Policies
Has your Practice implemented Workforce Privacy & Security policies and procedures to determine whether a particular user has the right to access ePHI (electronic protected health information) based on his/her particular job duties and responsibilities? Some workforce members may require different levels of access based on his/her job function or role within your Practice. Do you have a technical system in place to monitor inappropriate access such as log in monitoring or other technical safeguards?