Acceptable Use Policy (AUP)

Acceptable-use policy (AUP) is set(s) of accepted rules and procedures that regulate all activities associated with patient information and health information systems. AUP defines the natures of the allowed or not allowed activities.

AUP targets all personnel who have access to patient information of health information systems. It is essential in establishing “unauthorized activity” and in protecting health care entities from legal consequences of such activities.

Explicit users acknowledgment of the policy, either in paper or online, is important in the validity of AUP.