Removable Media and Portable Computers

Policy

Category: Information Technology
Subject: Removable Media and Portable Computers
Division: N/A
Policy Number: CA.54.01.111
Effective Date: January 31, 2012

POLICY STATEMENT

It is the policy of Wellington-Dufferin-Guelph Public Health (WDGPH) to protect personal health information (PHI) and personal information (PI) in a manner consistent with MFIPPA and PHIPA. In particular PHIPA Orders HO-004 and HO-007.  This means that any PHI stored on any mobile device must be strongly encrypted. 

SCOPE

This policy applies to all WDGPH employees with access to a computer and the Internet.

DEFINITIONS

Mobile Device – a USB data stick, a laptop computer, tablet computer or any other device that may be considered a ‘Mobile Computing Device’.

RESPONSIBILITY

Information Technology (IT) Department will:

  • Encrypt any laptop or mobile computer device which may contain PHI; and
  • Configure equipment to automatically lock after a period of inactivity (5-10 minutes).

All Employees will:

  • Be mindful of any mobile computing devices in their possession.  It is recommended to place any mobile computing device in the trunk of the car when it cannot be taken into a location; and
  • Identify and report if any device is not encrypted, and must also refrain from using them until they are encrypted. 

REFERENCES AND RELATED FORMS, POLICIES AND PROCEDURES

Corresponding Procedure:  N/A

APPROVED BY

Carole Desmeules