storage necessary. You of my practice when it is no are able to mark longer needed (e.g. when a patients as inactive to patient moves and no longer designate when receives care at the patients no longer practice)? receive care. Have I developed drchrono is it can be contingency plans so that accessed from the my employees know what to computer or iPad do if access to EHRs and wherever there is an other EHI is not available for internet connection! an extended period of time? Please review our Have I developed processes terms of service online for securely exchanging if you have any electronic health questions. information with other health care entities? Have I developed processes Patients must present a unique identifier that my patients can use to captured in drchrono securely connect to a and go through a portal? Have I developed authorization processes for proofing the process including identity of my patients patient and provider to before granting them access enable access to to the portal? OnPatient. Again, since drchrono Do I have a process to is web-based, there periodically test my health IT should be no local backup capabilities, so that I storage necessary. am prepared to execute them? If equipment is stolen or No PHI should ever be stored on local lost, have I defined equipment, but it’s processes to respond to the always smart to change theft or loss? your password in case of theft! Identifying Physical Safeguards
of my practice when it is no longer needed (e.g. when a patient moves and no longer receives care at the practice)? storage necessary. You are able to mark patients as inactive to designate when patients no longer receive care. Have I developed contingency plans so that my employees know what to do if access to EHRs and other EHI is not available for an extended period of time? drchrono is it can be accessed from the computer or iPad wherever there is an internet connection! Have I developed processes for securely exchanging electronic health information with other health care entities? Please review our terms of service online if you have any questions. Have I developed processes that my patients can use to securely connect to a portal? Have I developed processes for proofing the identity of my patients before granting them access to the portal? Patients must present a unique identifier captured in drchrono and go through a authorization process including patient and provider to enable access to OnPatient. Do I have a process to periodically test my health IT backup capabilities, so that I am prepared to execute them? Again, since drchrono is web-based, there should be no local storage necessary. If equipment is stolen or lost, have I defined processes to respond to the theft or loss? No PHI should ever be stored on local equipment, but it’s always smart to change your password in case of theft! Identifying Physical Safeguards
drchrono_s_Privacy_and_Security_guide.docx