HL7 Personal Health Record System Functional Model, Release 2
2.0.1-ballot - Normative Ballot

This page is part of the HL7 Personal Health Record System Functional Model, Release 2 (v2.0.1-ballot: Normative 1 Ballot 1) based on FHIR (HL7® FHIR® Standard) v5.0.0. No current official version has been published yet. For a full list of available versions, see the Directory of published versions

Requirements: TI.2 Audit (Function)

Page standards status: Informative
Statement N:

Audit Key Record, Security, System and Clinical Events

 Description I:

PHR Systems have built in audit triggers to capture key events in real-time, including events related to record management, security, system operations or performance or clinical situations.

Event details, including key metadata (who, what, when, where), are captured in an Audit Log.

Audit Review functions allow various methods of critical event notification as well as routine log review.

Audit functions implement requirements according to scope of practice, organizational policy, and jurisdictional law.

 Actors:
ehr Criteria N:
TI.2#01 dependent SHALL

The system SHALL conform to function TI.1.3 (Entity Access Control) to limit access to, or modification of, audit record information to appropriate entities according to scope of practice, organizational policy, and/or jurisdictional law.
TI.2#02 dependent SHALL

The system SHALL conform to function TI.1.3 (Entity Access Control) to limit access to audit record information for purposes of deletion according to scope of practice, organizational policy, and/or jurisdictional law (e.g., limit access to only allow a specific system administrator to delete audit record information).