Which measures should you take to keep patient information secure on mobile devices?

• A. Share devices among staff to improve efficiency
• B. Use password protection, encryption, avoid storing PHI locally, and use secure networks; follow institution policies
• C. Store PHI in local device storage with no encryption
• D. Disable password protection to streamline access

Answer: (B)

Keeping patient information secure on mobile devices requires a layered approach: strong access controls, encryption, minimizing data stored locally, using secure networks, and adhering to institutional policies. Password protection helps ensure that only authorized individuals can access the device if it’s lost or stolen. Encryption keeps PHI unreadable if the device is compromised and also helps protect data as it moves across networks. Avoiding storing PHI locally reduces the amount of sensitive data that could be exposed if the device is misplaced. Using secure networks prevents eavesdropping on data in transit. Following institutional policies ensures these protections are applied consistently and meet regulatory requirements.

Other options introduce clear risks: sharing devices among staff weakens accountability and increases chances of unauthorized access; storing PHI locally without encryption leaves sensitive data vulnerable if the device is lost or stolen; disabling password protection removes a critical barrier to access.