HIPAA and Computers: Passwords, Locks, and Shared Desks

Security does not have to mean complicated. For most practices, the basics prevent the majority of mishaps.

Lock screens

Set computers to lock after a few minutes of inactivity. An open EHR in a hallway is an invitation for snooping or accidental disclosure.

Individual accounts

Shared passwords are a red flag. They make audits impossible and training pointless. Everyone should have their own login with permissions matched to their job.

Physical safety

Position monitors so patients cannot read them at check-in. Cover sheets on desks during lunch breaks.

For vendors

If you host apps for clinics, enforce MFA, rotate keys, and log admin actions. Your customers will ask for proof during procurement.