Healthcare Personnel Security Procedures

HEALTHCARE PERSONNEL SECURITY PROCEDURES

Purpose

This document establishes mandatory security procedures for personnel who provide clinical, administrative, technical, or contracted services in the healthcare facility. These procedures describe required screening, access control, confidentiality obligations, monitoring, incident reporting, and recordkeeping necessary to protect patients, staff, protected health information, and facility assets.

Scope

These procedures apply to all employees, contractors, volunteers, students, and any other personnel (collectively “personnel”) who require access to the facility, its information systems, patient care areas, or protected health information in the performance of their duties.

Definitions

“Background Check” means criminal history, employment verification, professional license verification, and other checks as authorized below. "Access Privileges" means authorized electronic or physical access to facilities or systems. "Sensitive Information" includes protected health information, financial data, and other confidential business records.

Personnel Information

Security Clearance and Screening Authorization

As a condition of employment, assignment, or engagement, the organization requires personnel to undergo the following screening and to comply with ongoing monitoring. By initialing the fields and signing below, personnel certify consent to the described screening and acknowledge that falsification or omission of information may result in disciplinary action, up to and including termination.

Employee Initials:     Hire / Start Date:

Background & Screening Checklist

The following screenings are required unless exempted in writing by Human Resources or Legal:

Criminal background check (national, state, and county as applicable)

Employment and education verification

Professional license and sanction checks (where applicable)

Pre-employment and reasonable-suspicion drug screening

Reference checks and suitability assessment

Access, Identification, and Credentials

Personnel will be issued identification badges and assigned access privileges commensurate with job duties. Badges remain the property of the organization and must be displayed while on duty. Lost, stolen, or damaged badges must be reported immediately to Security. Access privileges are granted, modified, or revoked by Security in coordination with the department supervisor and Human Resources.

Confidentiality and Use of Information

Personnel shall access confidential information only as necessary to perform assigned duties. Unauthorized use, disclosure, or removal of protected health information or confidential business information is prohibited. Personnel must comply with applicable privacy and confidentiality policies and state and federal laws governing patient information.

Training and Ongoing Monitoring

Personnel are required to complete initial security and privacy training prior to independent access and annual refresher training thereafter. The organization will conduct periodic recredentialing, random audits, and access reviews. Continued access is contingent on satisfactory completion of training and absence of disqualifying incidents.

Incident Reporting and Discipline

All suspected security incidents, privacy breaches, misuse of access, or unauthorized disclosures must be reported immediately to the Security Office and Privacy Officer according to facility policy. The organization will investigate incidents and may take corrective or disciplinary action, up to and including termination and referral to licensing or law enforcement authorities.

Recordkeeping

Records relating to background checks, training, access assignments, and disciplinary actions will be maintained in personnel files or secure administrative systems for the period required by law and facility policy. Access to screening records is limited to authorized personnel.

Acknowledgment and Certification

I certify that the information I have provided in connection with these procedures is true and complete to the best of my knowledge. I authorize the organization and its agents to conduct background checks and verifications as described herein and to disclose such information to authorized administrative or regulatory authorities as required by law. I acknowledge that compliance with these security procedures is a condition of my access and that failure to comply may result in disciplinary action.

Authorization Expiration Date (if applicable):

Sign Now