Clean Desk Policy

1. Overview

Ensuring proper procedures are followed in relation to the clean desk policy is an important part of

protecting patient or confidential data.

2. Purpose

The purpose of this policy is to set the standards for ensuring confidential data is locked away when

the workstation is vacated.

3. Scope

All employees and contractors for Pipeline Health Systems and their subsidiaries are subject to this

policy and must adhere to the standards within.

4. Policy

4.1 General Requirements for Requests

4.1.1 All access requests must be submitted by human resources (employees), the medical staff

office (providers), shift supervisors (contractors ONLY).

4.1.2 All access requests must be accompanied by the New Access Request form with all required

fields completed.

6.1

6 Post-Credentialing Procedures

6.1 All employees of Pipeline Health Systems and their subsidiaries are required to ensure they’ve

secured all hardcopy data at the end of each workday as well as when they walk away from

their workstation.
6.2 All workstations must be locked if the employee walks away from it.

6.3 All workstations must be shut down at the end of the day.

6.4 All sensitive data must be in a locked drawer when not in use.

7. Compliance

7.1 Compliance Auditing

7.1.1 User security analysts will be auditing in various ways, such as walk-thrus and video

monitoring.

7.2 Non-Compliance

7.2.1 Any employees found to be in violation have the possibility of being subject to immediate

termination.