What is the recommended practice for handling PHI on shared devices?

• A. Clear data after use, sign out, enable auto-lock, and restrict access; ensure devices are secured and monitored
• B. Leave data visible for convenience
• C. Use shared accounts
• D. Print PHI for audits

Answer: (A)

Protecting PHI on shared devices hinges on reducing exposure through proper session and device controls. The recommended practice is to clear data after use, sign out, enable auto-lock, and restrict access; ensure devices are secured and monitored. Clearing data removes residual PHI from apps and caches, signing out prevents the next user from accessing your session, and auto-lock minimizes the window when a device could be unattended. Restricting access and keeping devices secured—with monitoring—adds layers of protection, making it easier to detect and respond to any misuse. This approach aligns with privacy and security expectations by preventing unauthorized viewing or data leakage if a device is lost, stolen, or accessed by someone else. Leaving PHI visible, using shared accounts, or printing PHI for audits all introduce avoidable risks and complicate accountability.