Start with your employer’s policy and use only approved systems for patient...

https://highstylife.com/does-a-browser-profile-protect-patient-data-by-itself/

Start with your employer’s policy and use only approved systems for patient work. Hide message previews on your lock screen. Set clear on-call notification rules, and check which account is active before sharing files or sending messages.