Start with your employer’s policy, then use only approved systems for patient...

https://foxtrot-wiki.win/index.php/What_Does_the_ICO_Say_About_Using_a_Personal_Device_for_Work_Data%3F

Start with your employer’s policy, then use only approved systems for patient information. Keep personal chats and photos off work channels. Turn off lock-screen previews so others cannot read messages at a glance