Privacy Considerations for Inactive or Deceased Patient Records
When accessing inactive or deceased patient records via the Welsh Demographic Service (WDS) in EMIS Web, rigorous privacy considerations must be upheld to ensure compliance and maintain trust. Here are key points to consider:Restrict Access: Only individuals with appropriate permissions should access inactive or deceased patient records. Access to sensitive information must be tightly controlled to prevent unauthorised access. EMIS Web uses smartcard authentication to ensure that only authorised users can access records.
Audit Trails: Accessing inactive or deceased patient records is an audited action in EMIS Web. This means that every access request is logged and can be reviewed by privacy officers, providing a layer of accountability and transparency.
Legitimate Purpose: Ensure that there is a legitimate and relevant reason for accessing these records. Often, this could be for resolving synchronisation issues or discrepancies between the local system and WDS. Access should only occur within the 'grace period' stipulated by the organisation's retention policy.
"By restricting access to inactive or deceased records and ensuring a strict audit trail, organisations can heighten their privacy measures and safeguard sensitive patient information."
Data Synchronisation: When handling discrepancies, it is important to synchronise local data with the Personal Demographics Service (PDS) data to maintain accurate and up-to-date records. This is essential for ensuring continuity of care and accessing full NHS functionalities.
Strict adherence to these protocols not only enhances privacy but also ensures compliance with privacy laws and regulations.
