Staff Confidentiality Agreement

1. What is confidential

All patient information (names, contact details, injuries, insurance, records, bills, appointments, signatures and anything else about a patient), all information about law firms’ and providers’ cases and business, and DocLien’s own non-public information.

2. What I agree to

• I will access patient information only when my job requires it, and only the minimum I need.
• I will not look up information about anyone out of curiosity, including family, friends, coworkers, public figures or myself.
• I will not share patient information with anyone who does not need it for their work on that case, inside or outside DocLien.
• I will not put patient information in personal email, text messages, social media, personal cloud storage or public AI tools, and I will not download it to personal devices.
• I will keep my password and two-step sign-in device secure, will never share them, and will lock or sign out of my screen when I step away.
• I will report any suspected loss, misuse or improper access of patient information, including my own mistakes, to my supervisor and to privacy@doclien.com right away.
• I will complete DocLien’s privacy and security training when I start and every year.
• When I leave DocLien, I will return or destroy all confidential information and will not keep any copies.

3. Monitoring

I understand that DocLien records every time I open a case or document, and that DocLien reviews these records.

4. Consequences

I understand that breaking this agreement may lead to discipline, up to and including ending my work with DocLien, and may also lead to civil and criminal penalties under HIPAA (42 U.S.C. 1320d-5 and 1320d-6) and California law (including Civil Code section 56.36).

5. How long this lasts

My duty to keep information confidential continues after my work with DocLien ends.