POLICY: Patient-identifiable information and management information is confidential and the patient's right to privacy shall be protected. The Company shall regulate the access and release of all data for both internal and external requests.

PROCEDURAL
DOCUMENTATION: The security and confidentiality of the Company's electronic data and generated reports are maintained through controlled access, distribution and release of confidential information. Information in all secondary systems, such as personal computers, is afforded the same protection of confidentiality as in the primary systems.

Only authorized personnel may release confidential information.

Definitions

Patient-identifiable Information:

Information that establishes the identity of a specific patient either explicitly or implicitly. This includes:

1. Health data which identifies patient facts unrelated to treatment; and

2. Clinical health information which relates to the patient's physical or mental condition and is obtained professionally for example, as a result of examination, treatment, observation, or conversation.

Management Information:

Data that identifies the operational activities of the Company. The scope of this data includes, but is not limited to, fiscal and administrative information.

Accessibility of Information From the Electronic Data System

All computer equipment—including hardware, software, electronic networks, e-mail, voice mail, telephone, intranets and internets—are part of a Medical Staffing Solutions owned private network of data processing resources. In order to protect the confidentiality and integrity of electronic data, the following criteria shall be met:

1. Access is limited to those instances in which a legitimate need and purpose can be demonstrated.

2. Access to the system will be controlled through security codes known only to the authorized users.

5. Access to the system from outside the Company’s physical location(s) will be permitted subject to this policy and will be monitored in accordance herewith.

6. Workstations must be protected when left for any length of time.

Software Security

Only fully licensed software and applications that are obtained through Medical Staffing Solutions are permitted in the company processing environment.

Personal or illegal copies of software are strictly prohibited.

Internet software downloads are not permitted.

Data Back Up

Critical data files must be stored on network drives.

User Responsibilities

All users involved in the creation, use, maintenance, transport and/or destruction of electronic data are obligated to preserve the confidentiality of that data.

The assignment of passwords is intended for individual use. Passwords are confidential and may not be posted, shared, or distributed. All users stand accountable and assume full responsibility for access to the electronic data system for themselves or their assignees using their password.

Visiting pornographic, offensive, or disruptive Internet sites is prohibited.

Information stored on or passed through the company communications or computing resources should not be considered private or confidential. The company reserves the right to monitor business phone calls, e-mail, Internet, and voice mail activities at its discretion to ensure compliance with this policy. The company additionally reserves the right to disclose, decrypt and produce copies of e-mails or files from any employee’s workstation or Medical Staffing Solutions equipment to ensure compliance with this policy.

Employees are required to immediately report suspected violations of this policy.

Unauthorized use or release of the Company's electronic data system will result in disciplinary action up to and including termination of employment.

Violations of this policy will result in disciplinary action up to and including termination of employment.