Fine-grained document access control

For a national healthcare organisation, we contributed to the delivery of functionality that allows patients to manage how their healthcare information may be accessed and used.

The fine-grained document access control solutionion provides several levels of access configuration. Patients can retain the default access rules, apply simplified restrictions, define detailed permissions or prevent general access to their healthcare information.

Detailed settings can be created according to factors such as:

the healthcare professional requesting access;

the type of clinical document;

the medical category concerned;

the organisation that created the information.

Patients can define exceptions to broader permission rules and can provide a selected healthcare professional with temporary access for a specified day. Emergency situations and certain active healthcare workflows may be handled as exceptions to standard restrictions.

The solution also supports the management of personal contact information, including an email address for notifications and the telephone number of a person to contact in an emergency.

Patients can choose to receive notifications when new prescriptions, referrals or clinical documents are created. An activity log provides an overview of actions involving their healthcare information, including when an action occurred, who performed it, the organisation involved, the type of operation and the affected documents.

Delegated access can also be recorded and managed. Patients can review authorised representatives, the purpose and type of representation, its validity period and its current status.