Passwords should be immediately discontinued upon user termination, leave of absence, or reassignment. Password access should be limited to no more than three attempts and also may be time limited. More stringent measures of identification such as voiceprint, fingerprint, or retinal scan may also be utilized. The system should limit authorization to only the information required by that user. In other words, billing personnel should not have direct access to lab values and other detailed patient care information.
Further controls can define the functions a user can access.
For example, a user may be able to read the information but cannot edit it, or they can edit by making a new entry but cannot change an existing entry. These software and hardware controls protect the integrity of the data by preventing intentional or inadvertent tampering. Access patterns and system utilization must be periodically reviewed, particularly unauthorized access attempts. Limitation of printer access To prevent unnecessary hard copy circulation of patient care information, a limit should be placed on printing specific patient information. If computer generated worksheets are used, they should be distinctly different from any medical record component and there must be a specific procedure for use and destruction.