Review who looked at patient details

For privacy officers in a health system: the Privacy overview, the Patient Access report, requests to remove patient protection, Mercury support visits, and who in your organization can see what.

Everything here applies only when patient privacy is on for your organization. How protection works, what is masked and how a person shows a patient's details are in Patient privacy settings.

Where to start

Open the Insights menu and choose Privacy. It is there only for people whose role includes reviewing patient access. A row of links at the top reaches the rest of your work, as your rights allow: Overview, Access report, Privacy settings, Patient addresses and Patient items.

Patients are shown masked on these pages, and reading them is not recorded as a look.

The Privacy overview

The tiles count Looks today, Looks this week, Looks this month, Exports this month, Protection changes this month and Removal requests waiting. Each tile opens the list it counts.

Worth a look names people whose looks in the last 30 days stand out: far more looks in a day than usual for them, or in a month than others in the same role; at least half their looks before 7:00 AM, after 7:00 PM or at a weekend; most looks at shipments from sites other than their home site (people whose role covers the whole organization are skipped for this one); or Other given as the reason for most looks. These are usually explained by the person's work. See their activity opens their looks.
Who looks most and Reasons given show the last 30 days by person and by reason.
Mercury support access lists Mercury support visits to your organization in the last 90 days, with the help request and the reason given.
Patient shipments this month shows how much of your shipping carries patient information.

The Patient Access report

Choose Access report. It lists every reveal of a patient's details, every export with full patient details and every change of the patient mark, with When, Who, What, Patient, Reason and Record.

To answer a request about one patient, type the patient's name, a shipment id or a tracking number in Find a patient.
Narrow the dates, or choose Show all time.
Open the record from its row if you need the shipment itself.

Looks stay in the report even after a shipment's protection is removed. The same history for one shipment is in the Patient access card on its page.

Requests to remove protection

Removal requests waiting opens Approvals showing only those requests. Read the reason, then choose Approve removal or Keep protected. The shipment stays protected until a request is approved.

Who can see what

Each of these is a separate right in a role, so you can give each one only to the people who need it:

Right	What it allows
See patient details	Choose Show and a reason to see a masked patient's name, street and phone. Everyone else, except the person who created that shipment, sees initials, city, state and ZIP only.
Export with patient details	Download History with full patient details, after picking a reason.
Remove protection	Take the patient mark off a shipment, with a reason. Others can only request it.
Review patient access	The Privacy pages above.
Manage privacy settings	Privacy settings and Patient items, without administering anything else.

A protected shipment's label opens for the person who shipped it, people with the ship right whose home site is the shipment's site, and people who may see patient details, and each opening is recorded. Finance, leadership and auditors who can read the shipment but do not meet this cannot open its label. To check one person, an administrator opens them under Manage, Users and reads the Effective access panel.

Settings you control

Privacy settings holds the patient privacy settings, among them Patient information, Flag every shipment made here, Sign people out after (idle minutes), Remove patient details after (days) and Patient details in references and notes. Patient information is Off, By rule or Always. With privacy on and Sign people out after (idle minutes) left empty, people are signed out after 15 minutes. Choose Save privacy settings to save. Every change is recorded in the Audit Trail.