Need-to-know and role-based access

Need-to-know means patient information should only be accessed by staff who need it to carry out a work task. Employment or technical ability to open a record is not a sufficient reason.

Reception and admin staff often require access to records, but each access should have a clear purpose. Opening a record to book an appointment, process correspondence or confirm authority is appropriate; browsing because you recognise the patient is not.

Common risk points

• Familiar patients: neighbours, relatives, colleagues or well-known community members.
• High-profile incidents: curiosity after an accident, death or police attendance.
• Shared logins: using another person's account or leaving a system open.
• Overheard conversations: discussing cases where other staff do not need to know.

Audit trails matter

Clinical systems usually record who accessed a record and when. Audit trails support the professional expectation that staff can justify their access.

Access should always match a work purpose; curiosity is never a valid reason to open a patient record.

Managers and permissions