[PC-BH-Integration] HIPAA Issue Related to Computer Lock OutInterval

[Vic Topo]

Agency wide we were originally set to 15 minutes, staff reported this
was difficult and inefficient.  We ultimately agreed that staff were
responsible for logging off or locking unattended IT resources. We still
have in place auto log off procedures. It varies with hardware used and
locations. Applications with PHI are set to 4 hours. 

 

Vic Topo, President/CEO

Center For Life Management

10 Tsienneto Road

Derry, NH 03038

603-965-0729

CONFIDENTIALITY NOTICE

The information in this message (and any documents attached to it) is
CONFIDENTIAL AND PRIVILEGED.  It is intended solely for the addressee.
Access to this message by anyone else is unauthorized.  If you are not
the intended recipient you are hereby notified that any dissemination,
copying or distribution of this message, or files associated with this
message, is strictly prohibited.  If you are not the intended recepient,
please delete all electronic copies of this message (and the documents
attached to it), destroy any hard copies you may have created and notify
the information services department immediately at 434-1577 or at
issupport at clmbehav.org <BLOCKED::mailto:issupport at clmbehav.org> .


 

 

________________________________

From: pc-bh-integration-bounces at lists101.his.com
[mailto:pc-bh-integration-bounces at lists101.his.com] On Behalf Of Louise
Haddock
Sent: Wednesday, January 28, 2009 9:22 AM
To: 'pc-bh-integration at nccbh.net'
Subject: [PC-BH-Integration] HIPAA Issue Related to Computer Lock
OutInterval

 

We are searching for information related to the length of time that
organizations have in place related to computers locking users out of
the system. We are attempting to gather information from our colleagues
to assist us in establishing a benchmark. We have had a request from 2
areas within our organization to lengthen the amount of time at which
the system locks a user out. They are as follows:

 

1. A 24X7 crisis hotline unit that is located in a secure area with key
pad entry. Currently the system locks the user out after 10 minutes of
no activity causing frequent log ins. No clients enter this area, only
employees.

 

2. An outpatient clinic providing medication management services and
outpatient psychotherapy services. The minimum length of service is 30
minutes and the maximum is 90 minutes. This unit is in a secure area
with key pad entry, each provider of service is in a private office,
clients are escorted in and out of the office area by the clinician
treating them. The system locks users out after 10 minutes of no
activity.  

 

We would appreciate any information you may will willing to share with
us. 

 

Thank you for your consideration. 

 

Louise Haddock

VP Continuous Improvement

Youth alternatives Ingraham

lhaddock at yimaine.org

207-523-5043

 

 

 

________________________________

Confidentiality Notice: This email message, including any attachments,
may contain confidential and privileged information and is for the SOLE
use of the intended recipient(s). Any unauthorized review, use,
disclosure or distribution of this email and/or its attachments is
strictly prohibited. If you are not the intended recipient, please
contact the sender by reply email and destroy/delete all copies of the
original message.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists101.his.com/pipermail/pc-bh-integration/attachments/20090129/5000ecb6/attachment.html>