Which practice best protects patient information when using electronic devices in a clinic?

• A. Leave the device unlocked for quick access.
• B. Share login credentials with coworkers to minimize delays.
• C. Use strong authentication and PHI access controls; log off when done.
• D. Access PHI with anyone in the room to avoid interruptions.

Answer: (C)

Protecting patient information hinges on making sure only authorized people can access PHI, and that every access is traceable. Using strong authentication verifies the user’s identity, and applying PHI access controls ensures people can only see the data they need for their role. When you finish, logging off ends your session so no one else can pick up where you left. This combination keeps PHI private, supports accountability for actions taken, and lowers the chance of someone viewing data they shouldn’t.

Leaving a device unlocked invites anyone nearby to see PHI. Sharing login credentials removes individual accountability and is a serious security violation. Allowing anyone in the room to access PHI breaks patient privacy and can violate legal and policy standards.