2 of 10
1. Responsibility as soon as the employee leaves
Adobe Stock
When a workforce member is leaving the organization, it is important to ensure that the worker’s access to protected health information is effectively terminated, according to OCR. Initial steps include making sure mobile phones, laptops and other devices are returned; approved PHI on personal phones or other devices are cleared or purged of electronic protected health information; and shutting down all accounts of the user—including inactive accounts.