Standards and Guidelines for Electronic Medical Record Systems in ...

is owned by the Facility.
3.2 Employees shall report defects discovered in systems to the IT manager so steps can be taken to
resolve the problem.
3.3 Employees shall be subject to civil and criminal liability if they disclose passwords or make IT systems
available to others without permission.
4 Invasion of Privacy
4.1 Employees shall be subject to civil and criminal liability if they invade the privacy of individuals or
entities without authorization.
4.2 Employees shall not use electronic communication facilities to send fraudulent, harassing, obscene,
threatening, or other unlawful messages are prohibited.
4.3 Employees shall not provide information on, obtain copies of, or modify data, programs, or passwords
belonging to other users.
4.5 Employees shall not attempt to gain unauthorized access to systems or private information. System
Administrators may access staff files at any time for maintenance purposes and report suspected
unlawful or improper activities.
Email Policy
Email is intended to be used primarily for business purposes. Any personal use must be of an incidental nature,
and not interfere with business activities, involve solicitation, commercial activities, and potentially embarrass
Facility.
1. Employees shall use email to send documents to other staff connected to Facility email system.
2. Employees shall use email for official business only.
Standards and Guidelines for Electronic Medical Records Systems in Kenya 98