Category: Information Technology
Subject: Removable Media and Portable Computers
Policy Number: CA.54.01.111
Effective Date: January 31, 2012
It is the policy of Wellington-Dufferin-Guelph Public Health (WDGPH) to protect personal health information (PHI) and personal information (PI) in a manner consistent with MFIPPA and PHIPA. In particular PHIPA Orders HO-004 and HO-007. This means that any PHI stored on any mobile device must be strongly encrypted.
This policy applies to all WDGPH employees with access to a computer and the Internet.
Mobile Device – a USB data stick, a laptop computer, tablet computer or any other device that may be considered a ‘Mobile Computing Device’.
Information Technology (IT) Department will:
- Encrypt any laptop or mobile computer device which may contain PHI; and
- Configure equipment to automatically lock after a period of inactivity (5-10 minutes).
All Employees will:
- Be mindful of any mobile computing devices in their possession. It is recommended to place any mobile computing device in the trunk of the car when it cannot be taken into a location; and
- Identify and report if any device is not encrypted, and must also refrain from using them until they are encrypted.
REFERENCES AND RELATED FORMS, POLICIES AND PROCEDURES
Corresponding Procedure: N/A