S-BH-04 · W21 Behavioral Health Data Segregation (42 CFR Part 2) · fit: unknown

Review who opened a protected record

Personahim_technician
JourneyA behavioral health note is protected
StepReviews who opened the protected record Task_08_ReviewsWhoOpenedTheRecord

Scenarios

S-BH-04.1Given accesses to a sensitive patient's record by several users, When I list the users who accessed the record over a date range, Then each access is listed with the user, the date and time and the option used, as DG SECURITY LOG (#38.1) holds them.
S-BH-04.2Given my user without the DG SECURITY OFFICER key, When I ask for the list, Then I am refused, and told I do not have the privileges to display user access.
S-BH-04.3Given a break-the-glass on a behavioral health note (S-BH-03.1), When I list the accesses to the patient's record, Then the break-the-glass is listed with the user, the note, the date and time, and the reason given.