Notes below from SF Case 376002 that are the customer request:

NPH patients in VINA should work like it does today in Epic.

Today when an IP Nurse tries to look at a patient in an NPH department (NP4N, NP4E, NP4W) they see “restricted” instead of the patient name. And when they try to assign themselves to the patient they get the below BTG pop up.

[Break-the-glass pop up description: Break-the-Glass security does not authorize you to open this activity for the selected patient. If this message is displayed in error, contact your system administrator.]

If it is restricted in Epic, it should also be restricted in VINA. (Meaning, if an IP nurse cannot see a patients name and MRN in Epic, then they shouldn’t be able to see it in VINA either).

In an ideal world NPH staff should be able to see those patients. There are also others who have access to see NPH patients in Epic, but we would need to work with our security leads to see what roles those are. Also, users outside of NPH should be able to see that someone is in the bed but they just wouldn’t be able to see any PHI.

To summarize, the customer would like the ability to make it so that only users that are part of the NPH departments (a subset of departments in the Ronald Reagan facility) have access to view certain patient information (MRN, First Name, Last Name) in Staff Assignment and Vina. For all other users, they should be able to tell that there is a patient there, but the MRN and Name of the patient should be restricted/redacted.

Thank you! To clarify, currently there is an all or nothing group policy to hide PHI for all users. We need it to be more granular that can be applied to specific patients to flag (break the glass) and also to choose a location where PHI will be hidden to all other users not part of the location.

This is something we may consider in the future.