Orange County NC Website
Browse       Search
c. Staff members must not allow other staff members or individuals to use their <br /> password. <br /> d. Passwords must not be written down, posted, or exposed in an insecure manner <br /> such as on a notepad or posted on the workstation. <br /> 7. All passwords used to gain access to any network, system, or application used to access, <br /> transmit, receive, or store e-PHI must be of sufficient complexity to ensure that it is not <br /> easily guessable. <br /> a. Passwords should be a minimum of eight characters in length. <br /> b. Passwords should incorporate three of the following characteristics: <br /> i. Any lower case letters (a-z) <br /> ii. Any upper case letters (A-Z) <br /> iii. Any numbers (0-9) <br /> iv. Any punctuation or non-alphanumeric characters found on a standard ASCII <br /> keyboard (! @ #$ Y6 « /& * ( )_-+=( } |l : ; " ' | \ /7 < >, . ~ `). <br /> c. Passwords must not include easily guessed information such as personal information, <br /> names, pets birth dates, etc. <br /> d. Passwords must not be words found in a dictionary. <br /> Emergency Access to e-PHI and PHI <br /> If a system, network or application contains e-PHI used to provide patient treatment, <br /> and the denial or strict access to that e-PHI could inhibit or negatively affect patient care, staff <br /> members responsible for electronic information systems must ensure that access to that <br /> system is made available to any caregiver in case of an emergency. <br /> Termination of Access <br /> I. All supervisors will immediately notify the HIPAA Compliance Officer when a staff <br /> member has been separated from service with North State Medical Transport or when <br /> the person no longer is permitted to access e-PHI on North State Medical Transport's <br /> systems, networks, or applications. <br />