Data Privacy & Confidentiality

Data Privacy & Confidentiality

Introduction

The Homeless Action Network of Detroit (HAND) is committed to managing its client records to comply with HMIS data privacy and confidentiality rules. These rules establish how Client PPI/PHI will be managed outside of the Homeless Management Information System (HMIS) and define roles and responsibilities for creating, storing, accessing, amending, and disposing Client records.

All protected personal information and/or protected health information MUST be addressed in a confidential and secure manner.

Protecting Client Data

Data that contains confidential client identifying information MUST always be protected from unauthorized viewing or access. Neither the passwords nor reports can be shared outside the authorized appointed persons.

Unless authorized and properly encrypted, reports must NOT be shared electronically, via email or removable electronic media or saved in a non-secured environment. Reports (electronic or hard copies) must not be left visible to unauthorized individuals. All copies of reports (electronic and hard copies) must be destroyed immediately after use.