/
Access log

Access log

The access log shows who accessed your record and when. Every time a professional logs in and accesses your record, this will be recorded in your access log.

The access log includes your own access. By default, your own access is hidden. You can view entries showing your access by deselecting the 'Hide my own access' box.

Your access log is visible to you only. Organisations and carers with access to your record cannot see your access log.

Logged entries

When a professional views your record, we log the data that was loaded on the page they open. For example, all plans include your diagnoses, medications and allergies, so when a professional opens a plan, the access log shows that that the professional has viewed these data types.

The following parts of the record are included in the access log:

  1. Audio

  2. Demographics

  3. Diagnoses

  4. Events & messages

  5. Files

  6. Genetics

  7. Imaging

  8. Journal

  9. Library

  10. Measurements

  11. Plans

  12. Symptoms

  13. Tests

  14. Changes to sharing permissions

  15. Access to your record by third-party apps via the REST-API or single sign-on.

Access log limitations

Currently, there are three situations where activity isn't explicitly detailed in your access log. In both cases, however, you will still be able to see who has accessed your record.

  1. When healthcare professionals view the timeline on their summary page (showing recent visits, documents, and tests), the timeline view itself isn't logged yet. However, you will still see a log entry because the system automatically records their access to the demographics, allergies, and medications displayed on that exact same page.

  2. When an organisation automatically pulls your data into their local systems via the FHIR API, the data pull itself isn't logged yet (though we are currently developing this feature). Despite this, an organisation can only pull data if it has already added you to its network. Because this initial setup triggers an email notification, updates your Sharing page, and creates a log entry, no organisation can access your data without your prior knowledge.

  3. When healthcare professionals view data in your record that our user interface is reading from our FHIR store. Currently, this is appointments and medications. However, you will see that the professional has accessed your record because of the other data (e.g. demographics) that they will also have accessed at the same time.