Patient consent and privacy
Keep patient information limited to the people and purpose that require it.
Verify the patient before opening or changing a record. Record consent and permitted communications according to policy, and avoid copying sensitive clinical details into general notes. Review role permissions and access logs regularly.