Medical records must be kept secure. The Americans with Disabilities Act (ADA) requires that medical files must be securely stored separately from regular personnel files. The Genetic Information Nondiscrimination Act (GINA) also require that medical and genetic information to be stored separately. Best practices for keeping employee medical files secure:
Limit access to only those who need access to perform their job.
Keep paper copies in a locked cabinet in a locked room.
Encrypt electronic copies and, if possible, do not store on portable devices such as a laptop or phone.
Block digital files from being downloaded, emailed or printed.
Track access (who accessed and when).
Train employees about security procedures.
Don't store information you no longer need.