Health informatics — Audit trails for electronic health records

This standard specifies a common framework for audit trails for electronic health records, in terms of audit trigger events and audit data, to keep the complete set of personal health information auditable across information systems and domains. It is applicable to systems processing personal health information that create a secure audit record each time a user reads, creates, updates or archives personal health information via the system.

Main sections:

· Scope

· Normative references

· Terms and definitions

· Abbreviated terms

· Requirements and uses of audit data

· Trigger events

· Audit record details

· Audit records for individual events

· Secure management of audit data

· Annex A: Audit scenarios

· Annex B: Audit log services