Maintain privacy policy and procedure

Patient privacy is paramount and business associates must now have privacy policies. Employees should have screen savers or privacy screens. And any electronic systems that contain PHI must be password protected and automatically log people off after approximately 10 minutes. Also verify that each vendor’s written privacy policy exists.

Source :
https://www.facos.org/Public/Files/Practice%20Mgt/Sharpen%20Your%20Business.doc