Password Policy

Password policies are important to implement in clinics because passwords are a key safeguard of health information. Unfortunately, passwords are susceptible to cybercrimes including interception, brute force and social engineering. Protecting passwords will help prevent incidents of unauthorized access to your EMR and other important information. 

It is critical to provide all those working within the clinic the guidelines for creating and protecting passwords and ensuring that everyone is compliant.  

Instructions to use

These instructions are meant to assist you with making this document your own and to fulfill your obligations under the Health Information Act.

Please read the information in this policy throughout carefully, as these must be followed to be compliant with the Health Information Act. You can add items that are specific to your clinic for clarity. It is important to communicate this policy with everyone in the clinic to ensure they are aware of it and follow the processes outlined in the Act. 

Download PDF