HL7 Electronic Health Record System Functional Model, Release 2.1.1
2.1.1 - Normative International flag

This page is part of the HL7 Electronic Health Record System Functional Model, Release 2.1.1 (v2.1.1: Normative 1 - Normative) based on FHIR (HL7® FHIR® Standard) v5.0.0. This is the current published version. For a full list of available versions, see the Directory of published versions

Requirements: TI.2.2 Audit Log Management (Function)

Official URL: http://hl7.org/ehrs/uv/ehrsfmr2/Requirements/EHRSFMR2-TI.2.2 Version: 2.1.1
Standards status: Normative Computable Name: TI_2_2_Audit_Log_Management

Manage Audit Log

Description I:

Audit Triggers create Audit Log entries. Audit Log entries are typically managed as persistent evidence of events occurring over time, including events pertaining to record management, security, system operations and performance, key clinical situations.

Audit log entries capture event details, including key metadata (who, what, when, where).Audit log functions fulfill log maintenance and persistence requirements according to scope of practice, organizational policy, and jurisdictional law.

Criteria N:
TI.2.2#01 SHALL

The system SHALL provide the ability to capture audit log entries using a standards-based audit record format according to scope of practice, organizational policy, and/or jurisdictional law (e.g., IETF RFC 3881 "Internet Engineering Task Force, Request For Comment, Security Audit and Access Accountability Message XML Data Definitions for Healthcare Applications").
TI.2.2#02 SHOULD

The system SHOULD provide the ability to annotate or tag previously recorded audit log entries.
TI.2.2#03 SHOULD

The system SHOULD provide the ability to store audit log entry metadata (including related metadata). NOTE: Audit log entry metadata and related metadata ought to be stored in a secure fashion.
TI.2.2#04 SHALL

The system SHALL provide the ability to log access to audit log entries, and/or metadata.