LAB-QM-IT-001 — Laboratory Information Management, Data Security, and Backup Policy

1.0 Purpose

To establish an integrated operational policy governing laboratory information management, computer hardware security, data integrity verification, spreadsheet change control, and cloud backup protocols in the Tarangnan Community Hospital (TCH) Clinical Laboratory. This policy ensures that patient diagnostic records, test results, and quality management data remain accessible, accurate, secure from unauthorized alteration or loss, and fully compliant with DOH licensing requirements, ISO 15189:2022 Clause 7.6, and the Philippine Data Privacy Act of 2012.

2.0 Scope

This policy applies to all personnel who access, enter, verify, retrieve, or manage data in the TCH Laboratory Information System (Lab-LIS), whether on physical workstations or cloud repositories. It encompasses hardware maintenance, spreadsheet template validation, calculation verification, daily real-time cloud backup, cyber incident reporting, and off-site data safeguards. Downtime contingencies and disaster recovery procedures are governed by Computer and Power Downtime and Disaster Recovery Plan.

3.0 Definitions

• Lab-LIS — the dedicated, non-interfaced, Excel-integrated information system utilized by TCH for test reporting, section worklists, statistics, inventory tracking, duty scheduling, and Levey-Jennings QC monitoring.
• Data Integrity — the state in which electronic records remain complete, uncorrupted, and accurate through built-in cell protection, range validation, and cross-sum formula checks.
• Change Control — the formal, documented verification and approval process required before modifying any formula, macro, or structure in controlled diagnostic spreadsheets.
• Cloud Backup — the automated, continuous synchronization of active laboratory databases and spreadsheets to a secure Google Drive repository under dual credential custody.
• Security Incident — any event compromising the confidentiality, integrity, or availability of laboratory IT systems (e.g., malware infection, unauthorized data access, file corruption, or hardware failure).

4.0 Responsibility

4.1 Hospital Director

• Approves institutional IT resources, hardware upgrades, and enterprise antivirus/firewall protections.
• Holds overall accountability for hospital-wide compliance with the Data Privacy Act of 2012 (RA 10173).

4.2 Pathologist

• Holds secondary authorized custody of the dedicated Laboratory Gmail cloud backup account credentials.
• Reviews clinical calculations, auto-reporting algorithms, and spreadsheet validations before operational implementation.

4.3 Chief Medical Technologist / Laboratory Quality Manager

• Serves as the primary system administrator and sole authorized role permitted to unlock, edit, and validate controlled Lab-LIS template formulas and macros.
• Administers user access permissions, monitors daily Google Drive cloud synchronization, and conducts quarterly restore verification tests.
• Coordinates hardware servicing with municipal IT support and logs all maintenance, validations, and security occurrences.

4.4 Medical Technologists

• Accurately input patient demographics, examination findings, and QC data using authorized worksheets and templates.
• Perform systematic manual calculation cross-checks (e.g., Hemoglobin x 3 vs. Hematocrit), report formula flags, and maintain primary paper worksheets for legal attribution.

4.5 Laboratory Aides

• Access laboratory computers only for authorized non-technical duties (e.g., logging external supply receipts or viewing duty schedules).
• Comply strictly with workstation access rules; never modify, input, or release patient test results.

5.0 Policy / Procedure

5.1 System Architecture and LIS Specifications

• System Profile: The TCH Clinical Laboratory operates a standalone, non-interfaced computer system running licensed Windows, Microsoft Office Excel, and a PDF viewer.
• Core Capabilities: The Lab-LIS provides six dedicated functional modules: - Patient result entry and printable diagnostic report generation; - Sectional accessioning worklists (Hematology, Clinical Chemistry, Microscopy, Serology); - Monthly statistical volume tabulations; - Reagent and diagnostic supply inventory logs; - Monthly personnel duty rosters; - Quality control charting and automated Levey-Jennings plots.
• Hardware Environment: The laboratory computer is elevated above floor level, placed away from sinks, reagents, and heat sources, and protected by a dedicated Uninterruptible Power Supply (UPS) tied to the hospital backup generator.

5.2 Physical Workstation, Access Controls, and Password Policy

• Role-Based Access Model: Because the standalone Excel LIS lacks per-user database login credentials, access control is enforced through physical workstation security and file-level permissions: - Physical Access: Limited exclusively to authorized laboratory personnel; visitors and unauthorized hospital staff are strictly excluded from the console area; - Master Templates: Stored in a read-only directory with structure and formula cells locked with a master administrative password known only to the Chief MT / LQM; - Working Files: Daily transaction workbooks allow data input only in designated patient result cells.
• Workstation Security: Operating system screensavers shall lock automatically after fifteen (15) minutes of inactivity. USB drives of unknown origin are strictly prohibited.
• Malware Protection: The workstation must run active, automatically updated anti-malware software with weekly system scans.

5.3 Data Entry, Worksheet Attribution, and Verification

• Traceability Mechanism: In the absence of an automated system audit trail, individual legal accountability is established through paper worksheets and requisition slips retained in accordance with Laboratory Retention Schedule Policy.
• Mandatory Sign-Off: The testing technologist must record their initials and date on the bench worksheet corresponding to each electronic entry.
• Result Verification: Before electronic printing and release, the technologist verifies data entry accuracy against raw instrument readouts and analyzer prints.

5.4 Automated Data Integrity and Calculation Checks

• Spreadsheet Controls: Controlled LIS sheets incorporate automated integrity rules: - Cell Protection: Mathematical formulas, reference intervals, and report layouts are password-locked; - Visual Highlighting: Conditional formatting highlights critical values and abnormal results in distinct colors; - Biological Plausibility Checks: Automated warnings flag biological inconsistencies (e.g., Hemoglobin x 3 discrepancy > 3% against Hematocrit, impossible differential counts); - Sectional Reconciliation: Total daily test counts are automatically reconciled against registered patient accession numbers.
• Resolution of Discrepancies: Any spreadsheet formula error or unexplainable calculation flag shall be escalated immediately to the Chief MT / LQM.

5.5 Cloud Backup, Off-Site Management, and Dual Credential Custody

• Real-Time Cloud Synchronization: To prevent data loss from local drive failure, flood, or fire, the laboratory folder synchronizes continuously to an off-site cloud repository (Google Drive) under a dedicated institutional laboratory account.
• Dual Credential Custody: To ensure institutional continuity, the credentials for the laboratory backup account are held exclusively by two designated officials: - Primary Holder: Chief Medical Technologist / Laboratory Quality Manager; - Secondary Holder: Clinical Pathologist.
• Periodic Recovery Verification: The Chief MT / LQM shall perform a documented restore test at least quarterly by opening and verifying cloud-synchronized files against local data on F-QM-IT-001-A-V0.

5.6 Data Privacy, Confidentiality, and Cyber Incident Response

• Data Privacy Mandate: In compliance with Republic Act No. 10173 (Data Privacy Act of 2012), all electronic diagnostic data are classified as Sensitive Personal Information.
• Prohibited Transfers: Patient records shall never be copied onto unauthorized personal flash drives, emailed to personal accounts, or shared via unencrypted channels.
• Incident Management: Any suspected data breach, unauthorized access, ransomware infection, or fatal file corruption must be reported immediately to the Chief MT / LQM, Pathologist, and Hospital Data Protection Officer (DPO). Formal breach notification to the National Privacy Commission (NPC) shall occur within 72 hours if personal data is compromised.

5.7 Spreadsheet Validation and Change Control

• Pre-Implementation Validation: Any new Excel template or calculation macro must undergo formal validation before clinical deployment: - Manual recalculation of at least twenty (20) representative test data sets; - Boundary and stress testing of extreme high, low, and negative values; - Verification of print layout fidelity and reference range display.
• Change Control Protocol: Modifications to formulas, layout, or logic must be authorized in writing, documented on F-QM-IT-001-A-V0, and version-indexed. Historical superseded templates shall be archived permanently.

6.0 Records

All completed spreadsheet validation records, change control logs, quarterly backup restore verifications, and IT incident reports shall be retained in accordance with Laboratory Retention Schedule Policy.

7.0 References

• DOH Clinical Laboratory QMS Tool — Section 6 (Information Management System: Items 6.1.1, 6.1.2, 6.1.3, 6.1.5)
• DOH Administrative Order No. 2021-0037 — Annex A (Section V Records & Information; Item 26 Cloud & Data Backup); Annex B1
• ISO 15189:2022 — Clause 7.6 (Control of Data and Information Management, including 7.6.1, 7.6.2, 7.6.3, 7.6.5)
• WHO Laboratory Quality Management System Handbook — Chapter 17 (Information Management, Sections 17-1, 17-2)
• Republic Act No. 10173, Data Privacy Act of 2012

Companion policies:

• Confidentiality Policy — patient confidentiality, privacy protocols, and Data Privacy Act compliance
• Computer and Power Downtime and Disaster Recovery Plan — computer, LIS, and power downtime contingency and disaster recovery
• Laboratory Retention Schedule Policy — retention schedule for electronic data, validation records, and paper worksheets