Covered Entity information systems contain confidential records pertaining to business
operations, patients, business associate vendors or subcontractors, and COVERED ENTITY
employees. Because this information is vital to the operation of COVERED ENTITY
in providing quality service, it must be protected (“protected information”).
As such, in accordance with current HIPAA and Omnibus regulations, state law
and COVERED
ENTITY policies governing the access, use, and disclosure of
protected health information, you have the responsibility to protect such
data. This agreement is not intended,
and should not be construed, to limit or prevent an employee from exercising
rights under the National Labor Relations Act.
The purpose of this agreement is to
provide you with information to assist you in understanding your duty and
obligations relative to confidential information. Your signature on this
document indicates that the information contained herein has been explained to
you, you received a copy of this document, and that you understand the rules
set forth. In exchange for employment, continued employment, or contract, the
receipt and sufficiency of which is hereby acknowledged.
YOU AGREE:
1. To respect the privacy and
confidentiality of any information you may have access to through COVERED ENTITY
computer network and that you will access or use only that information
necessary to perform your job.
2. To refrain (whenever possible)
from communicating information about a patient or an employee in a manner that
would allow others to overhear such information and further to refrain from
discussing a patient’s information with anyone not permitted access to such
information in accordance with COVERED ENTITY established policies or that
particular patient’s wishes (e.g., friends, relatives, visitors, family members
or patients, etc.).
3. To disclose confidential patient
or staff information ONLY to those authorized to receive it.
4. To safeguard and not disclose your
password or user ID code or any other authorization you may have that allows
your access to protected information. You accept responsibility for all entries
and actions recorded using your password and user ID code.
5. Not to attempt to learn or use
another user password and user ID code to log-on to COVERED ENTITY computer network.
6. To immediately report to the HIPAA
Privacy Officer any suspicions that your password and user ID code have been
compromised.
7. Not to release or disclose the
contents of any patient or staff records or reports except to fulfill your work
assignment.
8. To obtain the approval for use of
portable media devices from the Privacy Officer, to obtain approval to copy any
of COVERED
ENTITY data, exclusive of patient and employee personal information
and protected health information to a portable media device from the HIPAA Privacy
Officer, to maintain the security of data on portable media devices, and to
connect portable media devices to a computer secured by the most up to date
antivirus software and operating patches as recommended by the HIPAA Privacy
Officer.
9. Not to remove or copy any
protected information or reports from their storage location except to fulfill
your work assignment.
10. Not to sell, loan, alter or
destroy any protected information or reports except as properly authorized
within the scope of your job assignment.
11. Not to leave your computer
terminal or workstation unattended without locking or turning off your terminal
before leaving your work area or securing hardcopy information so that it may
not be disclosed to unauthorized persons.
12. Not to access or request any
protected information that is not necessary to perform your assigned job
function.
13. Not to permit others to access COVERED ENTITY
computer network using your password or ID code.
14. To permit your access to COVERED ENTITY
computer network to be monitored;
15. Not to download or make copies of
any software or applications without proper authorization or license.
16. Not to access or download any
pornography or other illegal materials or perform any illegal activity such as
gambling while on COVERED ENTITY computer network.
17. Not to use our corporation’s
computer network to send/forward harassing, insulting, defamatory, obscene,
offending or threatening messages.
18. To promptly report any suspected
or known unauthorized access, use, or disclosure of protected information.
19. To abide by COVERED ENTITY “Notice of Privacy
Practices,” the policies and procedures set forth by COVERED ENTITY, and current federal
and state regulations governing privacy issues.
20. To restrict personal use of the
corporation’s computer network to meal and break periods and to follow COVERED ENTITY
established policies governing such personal use.
21. Not to store personal files or
electronic information on COVERED ENTITY computer network.
Upon termination of my employment or
services with COVERED
ENTITY, I shall promptly deliver to COVERED ENTITY all protected
information and documents, including, but not limited to, such things as
medical information, manuals, notebooks, reports, patient, employee and vendor
lists and information, and anything else owned by COVERED ENTITY or to which COVERED ENTITY
is entitled and which is in my possession or under my control.
In the event of a breach or a
threatened breach of any of the preceding provisions, COVERED ENTITY shall, in addition to
the remedies provided by law, have the right and remedy to have such provisions
specifically enforced by any court having jurisdiction, it being acknowledged
and agreed that any breach of any of these provisions will cause irreparable
injury to COVERED
ENTITY.
This agreement supersedes and
replaces any prior or existing understanding between COVERED ENTITY and me relating
generally to the same subject matter.
If any of the above numbered
provisions, in whole or in part, of this agreement is declared void or
unenforceable by a court of competent jurisdiction, the remainder this
agreement or the remainder of such provisions shall remain in full force and
effect.
This agreement shall be governed by
and construed in accordance with the laws of the State of Florida.
I further understand that the duties
and obligations set forth in this document will continue after the termination,
expiration, and cancellation of this agreement to include my termination of
employment. I also understand my password and user ID code can be temporarily
or permanently revoked or I can be terminated if I fail to abide by the rules
set forth.