Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

My application logs accesses to PHI. I need to add a log item for things like downloading and printing.

Is there a general term that I can use to describe these events? I'm thinking something like "export" or "externalize".

I want to represent that the user took an action which yielded a file or hard-copy of PHI which my software can no longer track.

share|improve this question

migrated from healthcareit.stackexchange.com May 1 '12 at 11:14

This question came from our site for healthcare IT professionals and solution providers.

3 Answers 3

up vote 5 down vote accepted

RFC 3881 details a format for capturing security audits in healthcare applications. It is the starting point for audit logs in the DICOM standard and IHE.

In any case, it discusses Export and Import events specifically in the case of printing and creating media. I would stick with the term Export.

share|improve this answer

The HIPAA term for it is "disclosure"

share|improve this answer
    
Looking at RFC 3881 I see export and disclosure. What is the difference? –  Freiheit Feb 10 '12 at 15:51

Export usually makes me think of just a download something like 'Output' is pretty generic:

02/09/12 12:00:00 Output - User - action detail
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.