A few guiding principles include:

• Access patient information only if there is a “need to know”
• Discard confidential information appropriately (e.g., locked trash bins or shredders)
• Forward requests for medical records to the Health Information Management Department
• Do not discuss confidential matters where others might overhear (e.g., cafeteria, elevator, buses, or restaurants)
• Do not leave patients charts or files unattended
• Report suspicious activities that may compromise patient confidentiality to your Privacy Officer