Carol forgets to close her computer screen when she leaves her work area, and her computer and work is unattended. This time the screen carries sensitive PHI - a HIPAA violation. Minimum use and minimum access are important parts of protecting PHI. See: Management & Protection of PHI > BHS Community>BHS Library>Compliance>HIPAA Privacy & Security P&P>page 13
Carol has a plan… there is some business that the company really, really wants to secure. Carol is going to give tickets worth hundreds of dollars for prime seats to that nursing home’s administrator and contract manager. Carol is ignoring our policies on business courtesies and would be in violation of our anti-kickback policy. See: Code of Conduct - Ethical Business Practices>BHS Community>Resources>Code of Conduct>pg15-16
If it’s a reminder for a personal purchase- no problem. But if it’s a reminder for a personal purchase to expense to the company, that would be an ethical violation. See: Business Expense Reimbursement > BHS Community>Resources>BHS Employee Handbook > pg 26
Everyone needs a dream and a goal!
Technically, it’s the company’s desk and she is assigned to use it. 😊 She certainly has personalized her area and even without her command “Don’t Touch”, coworkers need to respect her space.
Carol just doesn’t get it! Security of information and our system depend on the first step of securing passwords. This is a clear violation of our Passwords and Usernames policy. See: BHS Community>BHS Library>Compliance>HIPAA Privacy & Security P&P>page 27
Carol loves the bubbly! A pharmacy rep delivered an expensive bottle of champagne to Carol with a Thank you note for helping to promote a new medication so the rep could meet her sales goals. This is an ethical violation and is in violation of our Gifts and Entertainment policy. See: Code of Conduct - Ethical Business Practices > BHS Community>Resources>Code of Conduct>Pg 14-15 ; and BHS Employee Handbook – Relationships with Drug Companies > BHS Community>Resources > BHS Employee Handbook> pg21
Carol has done it again! Not all confidential information is PHI. Carol has left her desk unattended with sensitive business information visible in an email. This is a violation of our privacy policies. See: Data Classification Policy> BHS Community>BHS Library>Compliance>HIPAA Privacy & Security P&P>page 11
Carol is quite a fan! She starts her day with an iced coffee in a cup supporting her favorite team. Just don’t spill it on the desk….