Information Security, Devices, and Electronic Records
Sets the security safeguards that protect client and employee information in the Agency's systems, on phones and computers, in email and on paper: who gets access and how, passwords and multi-factor sign-in, rules for phones used for electronic visit verification, contractors, backups, removing access when someone leaves, and the yearly security review.
About this policy
- Policy number
- CA-HC-PRV-02
- Version
- 1.0
- Main rule
- Cal. Civ. Code §1798.81.5
- Library
- California home care · 50 policies
- Category
- Privacy
- Sections
- 21
In short
- Use your own login only. Never share a password or check in for someone else.
- Keep a screen lock on any phone you use for work, and keep it updated.
- Use only the Agency’s approved apps for client information, never personal texts or photos.
- Never give a password or sign-in code to anyone who calls, texts or emails asking for it.
- Report a lost phone or a suspicious message to the office the same day.
What's inside
21 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (Cal. Civ. Code §1798.81.5)
- 5. Giving and Managing Access
- 6. Passwords and Multi-Factor Sign-In
- 7. Phones and Other Devices
- 8. Email, Texts and Fax
- 9. Paper Records and the Office
- 10. Contractors and Systems
- 11. Backups and Availability
- 12. When Someone Leaves
- 13. Yearly Security Review
- 14. Responsibilities
- 15. Records and Compliance Monitoring
- 16. Staff Training
- 17. References
- 18. Related Policies and Forms
- 19. Approval
- 20. Revision History
An inspector may ask
- How do aides sign in to your scheduling or EVV system, and can they share a login?
- What happens to an aide's access on the day the aide leaves?
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.