Location of Surveillance Monitors. To prevent accidental breaches of PHI, surveillance monitors should be housed in a restricted area so that only employees that require access to the videos, such as security guards or management staff, have access. Video surveillance should always be viewed in a private secure location, and audio from videos should not be able to be heard by passersby.
Automatic Logoff. After a period of inactivity, it is important for computer monitors to automatically log off. This way should an unauthorized user have access to an unattended device, they will not be able to access any sensitive information.
Image Quality. To protect the anonymity of patients, when possible, video images should be degraded. This protects the identity of patients by blurring their faces and preventing them from being identified.
HIPAA and Use of Surveillance Video: Administrative Considerations
To ensure the proper use of surveillance video, there are certain administrative considerations.
Policies and Procedures. To ensure HIPAA compliant surveillance video usage, it is important to develop policies and procedures surrounding their use, access, control, management, and disposal.
Employee Training. The best way for you to ensure the proper use and disclosure of video surveillance is through employee training. Employee training should include your organization’s policies and procedures for the proper use and disclosure of video surveillance, and the procedures for employees to report suspected violations.