To make this more manageable, many therapists use either USB drives or cloud drives. For many clinicians, you aren’t always using only one device for files. The devices should also be kept physically secured- in a trunk or in a locked office, for example. If you password protect the files as well it increases the security of that information further. But the DLR still applies! All devices (laptops, iPads, etc) should all be password protected. This means keeping your notes, client files, data and more on your laptop or tablet device. Many of us are working to go “digital” now. The files should be places in a locked file box, then locked into the trunk of your car. There just aren’t enough hours in the day! When placing files in your car, the DLR still applies. One thing people don’t always consider is transporting these files. For files you keep in your office, they should be kept in a locked cabinet behind a locked door. When it comes to paper files, the DLR applies to physical locks.

So, how do we protect our client confidential information? One way is through the Double Lock Rule.ĭouble Lock Rule (DLR): all information should only be accessible after accessing them through two locks Paper Files But, with technology, “file” has taken on a whole new level of complexity. No matter how small or large your practice may be, making sure they are protected also protects you. Making sure your client files are secure is never something to be taken lightly.

Is dropbox secure enough for hipaa