How To Manage Ndis Participant Privacy Settings On Shared Staff Windows Pcs

Summary

This guide helps you troubleshoot and resolve: How To Manage Ndis Participant Privacy Settings On Shared Staff Windows Pcs. Follow the steps below to fix the issue.

Common Causes

Disability support providers often use shared office computers to access participant records and the NDIS myplace provider portal. Without proper privacy controls, staff accounts and cached credentials can remain active after a shift ends, increasing the risk of unauthorised access to sensitive health and personal information. This guide explains how support worker teams can configure Windows user accounts, browser profile separation, automatic screen locking, and logout procedures to keep participant data secure between users.

Quick Fix Steps

1. Create a separate Windows user account for every staff member who uses the shared PC.
2. Assign standard user privileges rather than administrator rights where possible.
3. Set Windows to require a password when waking from sleep or after the screen saver activates.
4. Configure each staff member to use a dedicated browser profile or private browsing window when accessing participant records.
5. Lock the computer using Windows key + L whenever stepping away, even for a short break.
6. Sign out of all portals and log off the Windows account at the end of each shift.

Detailed Instructions

Create Individual Windows User Accounts

1. Sign in to the shared PC with an administrator account.
2. Select Start, then choose Settings.
3. Go to Accounts > Family & other users (or Other users in some Windows versions).
4. Select Add account.
5. Follow the prompts to create a local user account for each support worker. Use their work email or staff ID as the username where practical.
6. Set each account as a Standard user, not an Administrator, unless specific software requires elevated rights.
7. Ensure every account is protected with a unique, strong password.

Tip: Avoid using a single shared generic login such as "Staff" or "Reception." Individual accounts make it easier to audit who accessed participant records and when.

Require Password on Wake and Screen Lock

1. Open Settings > Accounts > Sign-in options.
2. Under Require sign-in, choose When PC wakes up from sleep from the dropdown menu.
3. Search for "Screen saver" in the Start menu and open Change screen saver.
4. Set a short screen saver wait time (for example, 5 or 10 minutes).
5. Tick the box On resume, display logon screen.
6. Select Apply, then OK.

Caution: Do not disable the password requirement for convenience. On shared PCs handling NDIS participant data, automatic locking is a critical privacy safeguard.

Use Separate Browser Profiles for Participant Portals

1. Ask each staff member to create their own browser profile (for example, in Microsoft Edge or Google Chrome) linked to their work email.
2. Instruct staff to sign in to the NDIS myplace provider portal and other participant management systems using only their assigned profile.
3. Encourage use of private or InPrivate windows when accessing sensitive records on a shared PC, especially if a dedicated profile is not available.
4. Remind staff not to save passwords or allow the browser to "remember" credentials on shared machines.

Lock and Log Off Between Shifts

1. Press Windows key + L to lock the PC immediately when leaving the desk.
2. At the end of a shift, save and close all work, then select Start > Power > Sign out (or select the user icon and choose Sign out).
3. Do not simply switch users or lock the PC and leave it overnight. A full sign-out clears the active session and reduces the risk of the next staff member accessing the previous user's open portals.

Tip: Place a visual reminder near shared workstations, such as a small sticker that says "Lock it or lose it," to reinforce the habit of pressing Windows key + L.

Troubleshooting

Staff Member Cannot Log In to Their Account

• Verify the user is entering the correct password and that Caps Lock is off.
• If the account is locked out, an administrator can reset the password via Settings > Accounts > Family & other users, or through Active Directory if your organisation uses domain accounts.
• If the PC is not connected to the network, confirm the staff member is logging in with a local account rather than a domain account that requires network authentication.

Screen Lock Is Not Activating Automatically

• Check that the screen saver setting On resume, display logon screen is enabled.
• Ensure power settings are not preventing the PC from sleeping. Go to Settings > System > Power & sleep and review the sleep timers.
• If the PC is managed by your organisation's IT policy, group policy settings may override local configurations. Contact your IT support team for assistance.

Browser Is Remembering Another Staff Member's Portal Login

• Sign out of the portal completely.
• Close all browser windows.
• Reopen the browser using a private or InPrivate window, or switch to the correct staff profile before signing in again.
• Clear saved passwords and browsing data for the shared profile if necessary via the browser's Settings > Privacy and security menu.

Maintaining Ongoing Privacy Compliance

• Review the list of Windows user accounts quarterly and remove accounts for staff who have left the organisation.
• Conduct brief refresher training for support workers on locking workstations and signing out of participant portals.
• Ensure any new shared PC is configured with individual accounts and screen-lock policies before it is placed into service.
• Document which staff members have administrator access and limit this to only those who genuinely require it for software installation or system maintenance.

Still Having Issues?