EPR Systems • Short Report #02

Epic Systems & Cerner Millennium: How Hospital EPRs Track Staff Viewing

Modern hospital Electronic Patient Record (EPR) systems like Epic Systems and Oracle Cerner log every search query and viewing event. However, trusts frequently refuse to release these raw audit logs during Subject Access Requests.

  • Role-Based Access Control (RBAC): "Break the Glass" override warnings are routinely bypassed by staff.
  • Hidden Telemetry: System access logs record employee IDs, workstation IP addresses, and exact viewing timestamps.
  • Legal Rights: Section 170 of the Data Protection Act 2018 makes unlawful record viewing a criminal offence.

🔍 In-depth guide on demanding raw Cerner and Epic access logs releasing in our upcoming weekly update.

✉️ Email Desk (info@eihealthandfitness.com)