HIPAA And Remote Work, Protecting PHI At The Home Desk
A patient calls a healthcare support line at four in the afternoon. The agent who answers is working from a second bedroom, confirms the caller identity, opens the record and reads back a recent procedure and a prescription. The call is encrypted, the login was clean and the recording is retained exactly as the policy says. None of that addresses the person who walked into the room thirty seconds earlier and can see the screen.