HIPAA

All students must complete annual HIPAA training and remain in full compliance with all HIPAA regulations at all times.

Do not disclose any patient information—verbal, written, or electronic—outside of the clinical setting. Sharing protected health information on social media, in casual conversation, or in any unauthorized format is strictly prohibited. Violations may result in disciplinary action, up to and including dismissal from the program.

✔ No patient identifiers in notes, conversations, or online posts.

✔ Secure all records—lock screens, log out of EMR, and store papers properly.

✔ Discuss cases only in private with authorized personnel.

✔ No photos in clinical areas or of patients.

✔ Report breaches immediately to your preceptor and program.

Rule of thumb: If it could identify a patient, don’t share it.