This sample outlines a set of policies and procedures to give guidance and ensure compliance with all relevant laws and regulations when disclosing protected health information (PHI) in company directories. Health facilities maintain a patient directory for obtaining information regarding patients. Since this directory may sometimes contain personal information, it should be maintained with the utmost security and regard for patient confidentiality.