{"ref":"CA-HC-PRV-02","title":"Information Security, Devices, and Electronic Records","category":"Privacy","summary":"Sets the security safeguards that protect client and employee information in the Agency's systems, on phones and computers, in email and on paper: who gets access and how, passwords and multi-factor sign-in, rules for phones used for electronic visit verification, contractors, backups, removing access when someone leaves, and the yearly security review.","inShort":["Use your own login only. Never share a password or check in for someone else.","Keep a screen lock on any phone you use for work, and keep it updated.","Use only the Agency’s approved apps for client information, never personal texts or photos.","Never give a password or sign-in code to anyone who calls, texts or emails asking for it.","Report a lost phone or a suspicious message to the office the same day."],"primaryCitation":"Cal. Civ. Code §1798.81.5","citations":["Cal. Civ. Code §1798.81.5","Cal. Civ. Code §1798.82","Cal. Civ. Code §1798.81","Cal. Health & Safety Code §1796.43(a)(1)","Cal. Health & Safety Code §1796.43(a)(3)","Cal. Health & Safety Code §1796.52(c)"],"federalCitations":["45 CFR Part 164, Subpart C","42 U.S.C. §1396b(l)"],"surveyorAsks":["How do aides sign in to your scheduling or EVV system, and can they share a login?","What happens to an aide's access on the day the aide leaves?"],"forms":[{"ref":"CA-HC-PRV-02-A","title":"Device and System Access Agreement"}],"headings":["Terms of Reference","1. Purpose","2. Scope","3. Definitions","4. Policy Statement (Cal. Civ. Code §1798.81.5)","5. Giving and Managing Access","6. Passwords and Multi-Factor Sign-In","7. Phones and Other Devices","8. Email, Texts and Fax","9. Paper Records and the Office","10. Contractors and Systems","11. Backups and Availability","12. When Someone Leaves","13. Yearly Security Review","14. Responsibilities","15. Records and Compliance Monitoring","16. Staff Training","17. References","18. Related Policies and Forms","19. Approval","20. Revision History"],"version":"1.0","sample":false,"pack":"ca-hca","state":"California","service":"Home care","guides":[{"path":"/guides/home-care-agency-policies/","h1":"What policies does a home care agency need?"}],"agency":{"name":"Sample Agency","legalName":"Sample Agency, LLC","logo":null}}