Policy Manual sample

MDT Home Health Care Agency, Inc. any order/treatment). Email information (not sensitive PHI) is permitted only if an encryption email software is installed in the staff mobile device. b) Our workforce is training about this policy on the appropriate use of work-related texting/emailing. Use of labels to classify email to provide persistent classification based on content and/or context is recommended. “CONFIDENTIAL” information must be added at the signature panel of the email. c) Password protection and encryption for mobile devices that create, receive, or maintain text/emails messages with ePHI is required. d) An inventory of all mobile devices used for texting/emailing ePHI (whether provider-owned or personal devices) will be maintained if applicable. e) Proper sanitization of mobile devices that text/email ePHI upon retirement of the device f) Requiring annotation of the medical record with any ePHI that is received via text and is used to make a decision about a patient g) Setting forth a retention period or requiring immediate deletion of all texts that include ePHI (immediately after the text was sent) h) Use of alternative technology, such as a vendor-supplied secure messaging application if applicable. Home Health Agency Policies A-180