How to Keep PHI SAFE in a Digital World

📋 Why This Matters

Protected Health Information (PHI) is at the heart of your work—and one of the most sensitive types of data you’ll ever handle. Whether you’re entering notes, printing charts, sending a referral, or making a phone call, how you manage PHI makes or breaks your compliance.

🧠 What Counts as PHI?

PHI includes any information that can identify a patient, such as:

  • Names, dates of birth, and addresses

  • Medical history, diagnosis, medications

  • Insurance or billing information

  • Lab results and appointment details

  • Any communication about a patient’s care

Even casual hallway conversations can become HIPAA violations if overheard.

💻 Digital Protection Best Practices

Here’s how to safely handle patient info on-screen or online:

  • Always log out of the EHR when you’re done

  • Don’t leave PHI visible on screens in public or shared areas

  • Never text or email PHI unless you’re using a secure, encrypted platform

  • Use role-based access—only view what’s needed for your job

  • Verify patient identity before sharing any info, even on the phone

🖨️ Physical Privacy Still Matters

  • Store printed files in locked cabinets

  • Use cover sheets when faxing or printing patient info

  • Shred documents containing PHI—don’t toss them in the trash

  • Position monitors away from public view (e.g., waiting rooms or checkout)

☎️ Communication Do’s & Don’ts

Do:
✔ Ask for two patient identifiers before releasing info
✔ Use secure platforms for messaging and referrals
✔ Keep conversations private—even with coworkers

Don’t:
✘ Text patient info from your personal phone
✘ Leave voicemails with detailed medical information
✘ Discuss patient cases in open hallways or break rooms

🧪 Real Example

A nurse texted a patient’s diagnosis to another provider using her personal phone. It was quick—but not encrypted. That text was later found during a lawsuit. The practice faced a $10,000 fine and had to retrain all staff.

✅ Recap Checklist

  • Log out of all systems after use

  • Never leave PHI on screen or in public view

  • Use secure platforms for communication

  • Shred all paper records containing PHI

  • Always verify identity before releasing information

🔐 Final Thought

Keeping patient data safe isn’t just about rules—it’s about respecting trust. Patients share deeply personal information with you. It’s your job to protect it—every time, every click, every conversation.

PreviousNext