How Do I Avoid Casual Transfers Like Emailing Myself a Document Just to Print It?

You need to print a document. The approved printer is across the building, your work computer is not nearby, and the quickest idea is to email the file to your personal account. It feels like a small shortcut. But that shortcut can move patient or organizational information outside the systems and controls your employer has put in place.

The safer answer is not simply “be careful.” It is to know which routes are approved, make the safe route practical, and set up your device so information is less exposed when you are not actively using it. These steps apply whether you are printing, moving between work locations, or working from home.

This guide focuses on UK health and care settings. It draws on the Information Commissioner’s Office (ICO) guidance on working securely and working from home securely. Your organization’s policies and local procedures take priority: they determine which devices, services, printers, and support routes you may use.

Start With Your Employer’s BYOD and Device Policy

Before changing settings or choosing a transfer method, check your employer’s bring-your-own-device (BYOD), mobile-device, information-security, and printing policies. BYOD means using a personally owned device for work. Some organizations allow it under specific controls; others do not allow access to certain systems or data from personal devices.

Do not assume that a device is approved just because you can sign in, an app is available, or a colleague uses the same method. Ask your manager, IT service desk, information-governance team, or data-protection officer when the policy is unclear. In a clinical setting, also check any local rules for printing, records handling, and disposal.

Look for clear answers to these questions:

Can a personal phone, tablet, or computer access work email, clinical systems, or organizational files?
Which apps and storage locations are approved for work information?
Are there restrictions on downloading, copying, or printing patient or organizational data?
How must the device be protected, and what should you do if it is lost, shared, or compromised?
Which printers are approved, and how do you release a print job securely?
Who should you contact if the approved workflow is unavailable?

Policies may include requirements such as device encryption, a supported operating system, a strong passcode, multi-factor authentication, or management software. Follow the actual requirements set by your employer; do not treat a list of possible controls as permission to use a personal device.

Use Approved Workflows for Patient and Organizational Data

For patient information and other work data, use only the systems and routes your organization has approved. That may mean accessing a document through a clinical or document-management system, using a managed work device, or sending a print job through an approved print service. The exact workflow varies by organization.

Emailing a file to yourself can create extra copies in places you may not expect: a personal inbox, a sent-items folder, a phone’s download directory, a mail app’s cache, or a cloud backup. It can also make it harder for your organization to manage access, retention, or deletion. A folder called “Work” on a personal device does not, by itself, make the data secure.

The ICO’s security guidance emphasizes taking appropriate steps to protect personal information, including when staff work away from the usual workplace. The practical implication is to follow your employer’s approved controls rather than inventing a transfer route because it is convenient. If the right route is missing or not working, raise that as a service or workflow problem instead of routing around it.

A safer printing routine

Check whether a paper copy is needed. If an approved on-screen workflow meets the need, avoid creating an extra copy.
Use an approved device and system. Open the document from its authorized work location rather than forwarding it to a personal account.
Choose an approved printer or print service. If secure print release is available, use it and collect the pages promptly.
Check the output. Confirm that the correct document printed and collect every page, including any pages left in the tray.
Handle and dispose of the paper properly. Follow local rules for keeping, transporting, returning, or securely destroying confidential printouts.
Report a failed or misdirected print job. Use your organization’s incident-reporting route if information may have been exposed.

If you cannot access an approved printer, ask the relevant team for the approved alternative. Do not assume a nearby public printer, a family member’s computer, a personal cloud account, or a personal email address is acceptable.

Separate Entertainment From Clinical Work on the Device

When a device is approved for work, keep work use distinct from personal use as far as your employer’s rules allow. This is data separation: reducing the chance that work information gets mixed with personal accounts, apps, files, or backups.

Some organizations provide a managed work profile or container that separates work apps and data from personal content. Others may require a dedicated work device, or may allow only limited access. Use the controls your employer provides; do not try to create your own separation by moving work files into a personal folder or installing an unapproved app.

Useful habits include:

Open work documents only in approved work apps and save them only to approved work locations.
Do not paste patient or organizational information into personal messaging, note-taking, photo, or file-sharing apps.
Avoid adding work documents to personal cloud backups or synchronizing work folders with personal storage.
Keep personal and work accounts distinct where your organization supports that separation.
Do not let family members or other people use a device while a work session or work data is accessible.
Follow the organization’s process for removing work access or data when a device is replaced, lost, or no longer authorized.

Separation is not just tidiness. It helps reduce accidental sharing, makes it easier to find the correct copy, and limits what may be exposed obgynkey if a personal app or account is accessed by someone else. It does not replace the need for approved systems, device protections, or your employer’s incident procedures.

Make Lock Screen Previews and Notifications Private

A strong passcode matters, but information can still be visible before a device is unlocked. Message previews, email subjects, calendar alerts, and app notifications may appear on a lock screen. In a ward, shared office, public place, or home with other people nearby, that can expose details without anyone opening the device.

Review notification settings for work apps and any personal apps that might display work-related information. Depending on your device and employer’s configuration, you may be able to hide message content, show notifications only after unlocking, or turn off lock screen notifications for a specific app.

Test the setting on the actual lock screen

Set a test notification using non-sensitive content, or ask IT how to test safely.
Lock the device and look at the screen as someone nearby would.
Check whether the sender, subject, message text, patient details, or document name is visible.
Adjust the setting and repeat the test until the content is hidden as intended.
Check again after major operating-system updates or changes to your work apps.

Do not test with real patient information. Also check whether connected devices, such as a smartwatch or car display, show notification content. If your organization manages the device, its policies may control these settings; contact IT rather than trying to bypass management controls.

Use the device’s auto-lock and passcode settings as required by your employer. Lock the screen when you step away, even briefly. A notification setting is a useful privacy layer, not a substitute for locking the device or keeping it under your control.

Use This Quick Check Before Moving a File

Question Safer action Is this patient or organizational information? Keep it within the approved systems and workflows for that data. Am I using a personal device or account? Check the BYOD policy first. Do not assume access means approval. Am I moving the file only because the approved route is inconvenient? Use the approved route or ask for an authorized alternative. Could another person see the content without unlocking the device? Hide lock screen previews and test the result on the actual lock screen. Will a paper copy be left unattended? Use an approved printer, collect pages promptly, and follow local handling rules.

What to Do When the Approved Workflow Gets in the Way

Repeated workarounds often point to a practical problem: staff may not know the approved method, the system may be difficult to reach, or the print process may not fit the task. Record what is getting in the way and raise it with your manager, IT, or information-governance team. Describe the task and the barrier without including unnecessary patient details.

Ask for a specific, workable solution. For example, ask how to print from an authorized device at a particular site, how to access a document when working remotely, or what approved option to use during an outage. If there is an urgent clinical need, follow local escalation procedures rather than creating an unapproved transfer route.

If you have already sent work information to a personal account or believe it may have been exposed, do not quietly forward it again or assume deleting one copy resolves the issue. Follow your organization’s incident-reporting process promptly and provide the facts requested. The organization can advise on containment and any further steps.

Keep the Rule Simple

When the shortcut is “email it to myself,” pause and ask: Is this route approved for this information, on this device, for this purpose? If the answer is uncertain, stop and check. Use approved workflows for patient and organizational data, maintain data separation between clinical work and personal activity, and verify privacy settings on the screen people can actually see.

The ICO provides guidance on information security and working securely, including when working from home. Use that guidance alongside your employer’s policies, which should explain the systems and controls that apply in your role. A convenient approved workflow is worth asking for; an improvised transfer is not a substitute for one.

References:

Information Commissioner’s Office: Security
Information Commissioner’s Office: Working from home