When stepping away from a workstation, which action best protects patient information on an EMR?

• A. Lock the screen or log out
• B. Ignore it and leave it unlocked
• C. Share login credentials
• D. Turn off the monitor only

Answer: (A)

When you step away from a workstation, the goal is to prevent anyone from seeing patient information. Locking the screen or logging out creates a secure barrier that requires re-entering credentials to access the EMR again, so PHI isn’t exposed to bystanders. This protects patient privacy and aligns with HIPAA and workplace policies. Leaving the screen unlocked lets others view or even modify information. Sharing login credentials is a serious security violation because it grants access under someone else’s identity. Turning off the monitor alone can still leave a session open and potentially reactivatable without re-authentication. So, locking the screen or logging out is the safest, most effective option.