General IT — Can staff access patient records from personal devices?

Only if those devices are enrolled in your Mobile Device Management (MDM) platform, encrypted, and governed by your HIPAA security policies. Unmanaged personal devices accessing PHI is a compliance violation and a significant liability.