Healthcare Information Privacy and Security: Regulatory Compliance and Data Security in the Age of Electronic Health Records

APPENDIX B

Sample Rules of Behavior for Privileged User Accounts

 Note  The following statement of understanding and agreement for privileged use is a template that can be adapted for use in your organization and signed by all administrative users of your EMR systems.

The intent of the statement and agreement is to emphasize the fact that the nature of privileged use entails certain abilities to do things in the system that are not advisable or appropriate and which therefore must be governed by a general understanding between administrative security personnel and privileged users.

I adapted the language of this agreement from the United States ...