Designation:E1988–98AnAmericanNationalStandardStandardGuideforTrainingofPersonswhohaveAccesstoHealthInformation1ThisstandardisissuedunderthefixeddesignationE1988;thenumberimmediatelyfollowingthedesignationindicatestheyearoforiginaladoptionor,inthecaseofrevision,theyearoflastrevision.Anumberinparenthesesindicatestheyearoflastreapproval.Asuperscriptepsilon(e)indicatesaneditorialchangesincethelastrevisionorreapproval.1.Scope1.1Thisguideaddressestheprivacy,confidentiality,andsecuritytrainingofemployees,agentsandcontractorswhohaveaccesstohealthinformation.Thisaccessshallbeautho-rizedandrequiredtomeetjobresponsibilities.Trainingisessentialtodevelopinganunderstandingabout,andsensitivityfor,individuallyidentifiablehealthinformation.Anyoneinasettingthatcollects,maintains,transmits,storesoruseshealthinformation,orprovideshealthservices,oracombinationthereof,shallprovideprivacy,confidentiality,andsecurityawarenesstrainingtoallstaffandbusinesspartners.Trainingshallbebasedonjobresponsibilities.1.2Thisguideappliestoallindividuals,groups,organiza-tions,data-users,data-managers,andpublicandprivatefirms,companies,agencies,departments,bureaus,service-providersandsimilarentitiesthatcollectindividual,groupandorgani-zationaldatarelatedtohealthcare.Anyorganizationwhichhandlesorstoresindividuallyidentifiablehealthinformationhastheobligationtoeducateeemployees,agents,contractors,andvolunteersandotherswithwhomtheyhavebusinessrelationshipsregardingtheprivacy,confidentiality,andsecu-rityprinciplesandpoliciesandproceduresoftheorganization.1.3ASTMCommitteeE-31gratefullyacknowledgesthecontributionoftheComputer-BasedPatientRecordInstitute(CPRI)inprovidingthedocument,GuidelinesforInformationSecurityEducationProgramsatOrganizationsUsingComputer-basedPatientRecords,toserveasthebasisofthisguide.2.ReferencedDocuments2.1ASTMStandards:E1869GuideforConfidentiality,Privacy,AccessandDataSecurityPrinciplesforHealthInformationIncludingCom-puterBasedPatientRecords22.2CPRIGuidelines:GuidelinesforInformatio...
