audit_log

Audit Log

Eventually the audit report will need to record every access, modification and/or disclosure of a patient’s personal information. For example, viewing or printing a patient’s information needs to be logged. Access, modification or disclosure of registration data also needs to be logged (e.g. creating a new patient, updating a user’s name or role, etc).

1. The application shall automatically record every access, modification or printing of a patient’s personal information together with the time and identify of the accessing user.
2. The application shall automatically record every access, modification or printing of user and patient registration data, together with the time and identify of the accessing user (e.g. addition of a team member to the patient’s circle of care).
3. The log will display individual session records (i.e. will display all relevant meta data and fields that were modified during that session).
4. Admin users shall have the ability to view and print any and all audit logs pertaining to a specific patient or user.
   • Exporting and printing the audit log from excel is acceptable for now.
   • It is assumed that the header and footer will contain basic information about the document being printed (e.g. the subject patient or subject user, the date of printing, the page number).
   • No additional customized headers or footers are required at this time (e.g. company name and logo is not required in the header).
5. It shall not be possible to modify any audit logs.