1. Policy Statement
The purpose of the Smartcard Policy is to:
1.1 Inform individuals of their responsibilities.
1.2 Monitor compliance.
1.3 Inform individuals of the process of dealing with misuse (Disciplinary Action).
2. Purpose and Aims
2.1 To set out the required actions to ensure users comply with Terms and Conditions of Smart Card use.
3. Background and Current Position
3.1 Smart Cards provide more robust security, which is critical when handling sensitive medical information. Whilst paper records are generally in one place at a time, access to electronic information can be provided on a much wider basis. We must ensure all access is appropriate.
3.2 Usernames and passwords are easily shared, sometimes knowingly, sometimes not. Even with the best policies, processes and education in place, this still happens. A Smart Card is harder to share as it can only be in one place at one time. People are more familiar with protecting cards (i.e. credit cards). NHS Smart Cards will also require a PIN code, so both the card and code need to be entered to gain access.
3.3 Do not let anyone else use your Smart Card. Sharing a Smart Card and PIN number (or password) is illegal under the Computer Misuse Act 1990. It is also potentially fraudulent and could be harmful to patients. New computer systems will be used to prescribe and dispense drugs and it is critical that there is an accurate record of who has done this. Sharing a Smart Card will be a disciplinary matter.