All students using mobile and tablet device technology are expected to review and follow the policies outlined below:

• Stanford School of Medicine Course Content Access and Appropriate Use Policy
  

Stanford students may only use Stanford University School of Medicine course materials as intended for curriculum and course-related purposes. These materials are copyrighted by the University or others. Access to this content is for personal academic study and review purposes only. Unless otherwise stated in writing, students may not share, distribute, modify, transmit, reuse, sell, or disseminate any of this content.

• Restricted Data and HIPAA Compliance
  

Students must protect their iPads by following Stanford University mobile device security guidelines (especially by having a security passcode set and encrypting the iPad backup) to protect any Stanford Confidential Information that may be accessible by this device. Students must not access or store Stanford Prohibited Information on the iPad. iPads are not intended for the storage of Restricted Information, specifically including Protected Health Information (PHI). Definitions of terms are provided on the website linked above.

• HIPAA Security: Computing Devices and Electronic Storage Media Policy

This policy applies to computing devices and electronic storage media that are used by Stanford University HIPAA Components (SUHC) workforce members and business associates to create, access, or store electronic protected health information (ePHI).

• Stanford University Computer and Network Usage Policy
  
  Students must respect copyrights and licenses, respect the integrity of computer-based information resources and refrain from seeking to gain unauthorized access, and respect the rights of other information resource users.

• Stanford Hospital Q&A on iPad use and Access to Patient Records
  
  Students must review Stanford Hospital’s position on iPad use and access to patient records, and must follow the recommendations outlined on the Q&A web link.
  Students must agree to be bound to the terms of this Agreement. A student can be held financially responsible for the loss or theft of the device and the disclosure of information should he or she fail to take appropriate steps to protect the device and its contents.

iPad Policy and Procedures

Students that were provided with iPads upon matriculation must abide by the following expectations and guidelines:

• The iPad is Stanford property and will only be available to students while they are enrolled at Stanford School of Medicine (SOM).
• Students must use this device in a responsible manner and in accordance with University policies.
• Students should have no expectation of privacy regarding the device or its contents.
• Students must return the iPad to SOM when requested. iPad priviliges may be rescinded prior to graduation in cases where students are found not to have followed policies and guidelines for appropriate use of the device.
• Students must take appropriate steps to protect the iPad and data against loss or theft, e.g. not leaving iPads in public places, not checking iPads in luggage, and not leaving iPads in vehicles unless the vehicle is locked and the iPad is hidden from view.
• Students must immediately report the loss, damage or theft of an iPad to Mark Alabanza.
• Students must protect the data on the iPad with a password and follow all other security requirements.
• Students must accept financial responsibility for the loss or theft of the device and the disclosure of information resulting from failure to take appropriate steps to protect the iPad. Students may not jailbreak or otherwise tamper with the iPad operating system.
• Students must frequently make encrypted backup copies of iPad content in the case of loss or data corruption.
• Students may not store personal health information (PHI) on the iPad. If students choose to access EPIC or other patient record databases, they must do so in alignment with HIPAA compliance guidelines and hospital policies regarding iPad and other mobile device use. If use of the iPad should compromise the security of patient records in any way, students must be prepared to accept full responsibility for the breach, including responsibility for any financial penalties incurred.
• Policies and guidelines around appropriate use of iPads may vary among clerkships and hospital sites. Therefore, students must review and follow the policies and guidelines set by each clerkship director and by each hospital site. The privilege of using the iPad may be rescinded at any time. Students who do not follow policies and guidelines for appropriate iPad use may be asked to return the device prior to completing the clerkship rotation.

updated August 2012