Protected Health Information (PHI) - Hospital work

[JILLIANMC1]

Hi Everyone, Looking for best practices or advice on how to navigate projects with Protected Health Information (PHI) in Workfront. Thank you Jillian McGovern Project Manager NYU Langone Health New York, New York E: jillian.mcgovern@nyumc.org P: 646.754.7358

[JimBr1]

we do not store any PHI in WorkFront. There are many other Health Care organizations that also use Workfront. Maybe they can offer you some guidance. Jim Brown FujiFilm Medical Systems, USA

[KatherineHa1]

Since we don't have our WF instance encrypted at rest (its a $$$$ to have that enabled) - we don't store any PII in WF. Katherine Haven, PMP VP, Director, Business Technologies - PMO FCB

[AnthonyPernice]

Hi Jillian, The solution you're looking for will depend upon how you're working within Workfront, where the sensitive information is stored and who should or should not be able to see it. My instance is shared by a number of agencies, occasionally working on competing client products, sometimes those agencies have teams working on competing client products as well. For us, its as simple as *not* sharing projects or tasks with anyone outside the project team. If however, you are assigning tasks or issues to users who should not see other information in your project, adjusting the Access settings (either project by project or in the system defaults) so users assigned to a task or issue do NOT get access to the project (and subsequently any other tasks or issues they are not assigned to). I hope that helps a bit... Anthony Pernice Healthcare Consultancy Group

[DawnCe]

Hi Jillian, We are a not-for-profit Medi-Cal and Medicare health plan headquartered in Rancho Cucamonga, California. We are the largest health plan in the Inland Empire, and one of the fastest-growing health plans in the nation. With a network of more than 6,000 Providers and 2,000 Team Members, we provide comprehensive managed health care coverage to more than 1.2 million residents of Riverside and San Bernardino counties who are enrolled in "https://ww3.iehp.org/en/members/plans/medi-cal/">Medi-Cal or "https://ww3.iehp.org/en/members/plans/cal-mediconnect/">Cal MediConnect (Medicare-Medicaid Plan). With this being said, we paid for the secure data at rest. We have some departments that have built custom forms with members last four digit ID numbers/SS numbers as we still do our best to protect the members information. Some departments use this for queue management and not for storing member info in the documents area. They have a queue and a custom form to use as an identifier for the member but nothing more. Basically its helpful for the Nurse dept to have a customized view of information for that member etc. If you need further info please continue to reach out and I will do my best to assist. Have a great day. Dawn Cejudo Sr. Application Specialist/Workfront Admin Inland Empire Health Plan Rancho Cucamonga, CA 909.890.5108

[AlisonAn1]

HI Jillian, We use Workfront in Healthcare IT, so we often have projects that involve PHI. Even though we do pay for the more protected Workfront environment and our Info Sec team blessed the solution, I advise PMs and project teams to leave PHI data out of Workfront. We do not currently hold all project documentation in WF, so we haven't run into an issue. Alison Angilletta PMP Director, PMO RWJBarnabas Health

[MichaelLe]

Hi Jillian My apologies for the late response. We are part of the BlueCross BlueShield of Florida umbrella and we do not store PHI in Workfront. There are just too many risks involved and many other tools out there that can be leveraged/integrated with Workfront - like a restricted SharePoint site or others. Michael Lebowitz GuideWell Connect