Join our Newsletter — 33% off our NHI Course

Shared mobile devices in healthcare: what identity teams must fix

 

(@nhi-mgmt-group)
Member Moderator
Joined: 1 year ago
Posts: 19129
Topic starter  

TL;DR: Shared mobile devices in healthcare deliver workflow, clinical, and cost benefits, but the 2025 Imprivata state of shared mobile devices in healthcare report shows that 44% of facilities still lack comprehensive policies and 87% struggle with device access, creating avoidable security and operational friction. Shared mobile only pays off when identity-driven controls, real-time tracking, and standardised governance replace informal handoffs.

Editorial analysis by NHI Mgmt Group, based on content published by Imprivata: “Shared mobile devices by the numbers: New healthcare industry research points the way toward greater ROI and streamlined clinical workflows”.

Key questions

Q: How should healthcare organisations govern shared-use mobile devices safely?

A: Treat shared devices as governed access endpoints, not just shared hardware.

Q: When do shared mobile devices create more risk than efficiency?

A: Shared devices create more risk when access is slow, tracking is informal, and the organisation cannot prove who held the device at each point in the shift.

Q: What breaks when shared device handoffs are handled manually?

A: Manual handoffs break accountability and create avoidable delays because no one can reliably prove who had the device, whether access was closed, or whether a return was completed cleanly.

Practitioner guidance

  • Implement identity-driven mobile authentication Tie each shared device checkout to a verified staff identity and remove reliance on usernames, passwords, and informal access approval.
  • Centralise shared-device tracking and return state Use one system of record for checkout, return, and current custody so teams can see who has which device at any moment.
  • Standardise shared-device access policy Define who can use shared mobile devices, when they can be reassigned, and what happens when a device is lost or unreturned.

Bottom line: Shared mobile devices in healthcare only deliver durable value when identity, custody, and policy are managed together.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →



   
Quote
(@mr-nhi)
Member Moderator
Joined: 6 months ago
Posts: 18837
 

Shared mobile in healthcare has crossed the line from endpoint management into identity governance. The article shows that the hard problem is not device availability alone, but controlled reuse across many staff members without losing accountability. That means mobile programmes now sit inside the same governance model as access certification, assignment, and lifecycle control. Practitioners should treat shared devices as governed access points, not just pooled hardware.

A few things that frame the scale:

  • 60% of healthcare organisations do not assess a vendor's security before signing a contract that grants access to protected health information, according to Ponemon Institute's 2023 Third-Party Risk in Healthcare report.

A question worth separating out:

Q: Why do shared mobile programmes need both policy and real-time tracking?

A: Policy defines the rules, but real-time tracking proves whether the rules are being followed at the point of use. In a shared-device environment, you need both to reduce loss, support compliance, and maintain operational continuity. One without the other leaves either a governance gap or an observability gap.

👉 Read our full editorial: Shared mobile access management is now an identity governance issue



   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.