Institutions are required to have policies to protect

the privacy of patients' electronic information, including procedures for

computer access and security.

Health care providers should keep a patient's personal

health information private unless consent to release the information is

provided by the patient.

All team members have authorized access to

confidential information about the patients they care for and assume the duty

of protecting that information from others who do not have access.

understand that the patient has the right to decline

treatment and respect the his decision