Screen positioning, voice level in waiting areas, and dual monitors visible from lines matter.
Role-play common scenarios: wrong chart pulled up, family member asking for updates, caller impersonation.
Reporting near-misses builds culture without blame; hidden mistakes repeat.
Inspectors and partners ask for evidence, not intentions.
Retention schedules should tie to legal, payer, and specialty norms—not infinite hoarding.
Treatment, payment, and operations disclosures differ from marketing or research uses—forms should reflect that.
Every field you collect is another place PHI can leak—collect what you need, when you need it.