Confidentiality and Security Agreement and System Access Authorization for OpenSided MRI (OSMRI) PACS
I understand that the facility of business entity (the "company" in which or for whom I work, volunteer or provide services, or with whom the entity (e.g. physician practice for which I work has relationship (contractual or otherwise) involving the exchange of health information with OSMRI and affiliated sites through a picture archiving and communication system (PACS) which enables OSMRI and the Company to significantly reduce the inefficiencies of a manual film tracking and filing system while allowing radiology images to be combined with other patient reports and to be available digitally in multiple locations simultaneously (PACS). I further understand that the company and OSMRI have a legal and ethical responsibility to safeguard the privacy of all patients and to protect the confidentiality of their patient's health information (PHI) and confidential information.
In the course of my employment/ assignment/affiliation at the Company, I understand that I may come into possession of this type of Confidential Information via PACS. I will access and use this information only when it is necessary and in accordance with the terms of this agreement and as otherwise provided by law. I further understand that I must comply with the Agreement in order to obtain authorization for access to Confidential Information and PHI.
- I will not disclose or discuss PHI or Confidential information; unless directly related to continuity of patient care.
- I will not make any unauthorized transmissions, inquiries, or modifications of PHI.
- I agree that my obligations under this Agreement will continue after termination of my employment, expiration of my contract, or my relationship ceases with the company, or if I continue practice in another company.
- I understand that I have no right to any ownership interest in any information or equipment accessed or created as a part of this agreement.
- In using PACS and having access to Confidential Information, I will act in the best interest of the Company and OSMRI in accordance with the highest standards of conduct at all times.
- I understand that violation of this agreement may result in suspension and loss of privileges, with loss of access to Confidential Information via PACS.
- I will not demonstrate the operation or function of PACS to unauthorized individuals; including disclosure of my user name and password.
- I understand that I should have no expectation of privacy when using PACS. OSMRI may log, access, review and otherwise utilize information stored on or passing through PACS in order to manage the system and enforce security.
- I will practice good workstation security measures such as locking up CDS/ diskettes when not in use, continue with password access to the system, and positioning screens away from public view.
- I will use only my officially assigned User-ID and password.
- I will not share/ disclose user-IDS or passwords or use tools or techniques to break/ exploit security measures.
- I will notify OSMRI if my password has been seen, disclosed, or otherwise compromised, and will report activity that violates this agreement, privacy and security policies, or any other incident that could have any adverse impact on Confidential Information or PHI.
- I will only access PACS to review patient records when I have that patient's consent to do so. By accessing a patient's record, I am affirmatively representing to OSMRI at the time of each access that I have the requisite patient consent to do so and OSMRI may rely on that representation in granting such access to me.
- I accept full responsibility for the actions of any employees or agents under my control who may access Confidential Information and or PHI via PACS.