Access log

Finding the Access Log

Open

Understanding the Access Log

The access log shows who accessed your record, and when. Every time a professional logs in and accesses your record, this will be recorded in your access log.

The access log includes your own access. By default, your own access is hidden but you can review your access by deselecting the 'Hide my own access' box.

Open

Your access log is visible to you only. Organisations and carers with access to your record cannot see your access log.

What is covered?

When a professional views your record, we log the data that was loaded on the page they open. For example, all plans include your diagnoses, medications and allergies so when a professional opens a plan, the access log shows that plans, diagnoses, medications and allergies were viewed.

All parts of the record are included in the access log:

1. Appointments

2. Audio

3. Demographics

4. Diagnoses

5. Events & messages

6. Files

7. Genetics

8. Imaging

9. Journal

10. Library

11. Measurements

12. Medications

13. Plans

14. Symptoms

15. Tests

16. Changes to sharing permissions, i.e. which privacy labels a team has permission to access.

17. Access to your record by third party apps via the REST-API or single sign-on.

The following gaps exist in the access log:

• There is a summary page available for professionals accessing your record (which is not visible to you as a patient). The summary page includes a timeline that shows when you recently had hospital visits, documents, appointments, questionnaires, tests or imaging results. This page also shows your allergies, current diagnoses, current medications and plans. We don’t have entries in the access log for data on the timeline yet. However, you will still know that a professional accessed your record because the access log will show the professional’s access to the other data loaded on the summary page (demographics, allergies, current diagnoses, current medications and plans).

• If an organisation you are part of pulls your data into their local systems via the FHIR API, this is not currently visible in the access log. The organisation must have added you to their organisation in PKB in advance to be able to retrieve your data so you will already be aware that this organisation has access to your record. When they add you, you get an email notification, they will be visible on your Sharing page and there will be an entry in your access log. A new organisation would not be able to access your record via this pathway without a notification being sent to you. This gap exists because we are currently developing our FHIR API, we will be including adding entries to the access log as part of this project.