Who has accessed a client’s data? (access logs)

HealthBank keeps an access log for every client record. It shows who has viewed or changed a client’s information, and when. You can ask for a copy if a client asks who has seen their data, or if you need to check access for your practice.

What an access log shows

An access log can include:

• the person who opened or changed the record
• the date and time
• what they viewed or changed, such as notes, forms, pathology results or files

Who can access a client’s data

Only people with a reason to see a client’s record can access it:

• The client’s practitioner. This is the practitioner the client booked with, or has shared their health record with.
• Your practice team. Only team members you’ve given access to.
• HealthBank support. Only when it’s needed to fix a problem you’ve reported, and only for as long as it takes.

How to request an access log

Email support@healthbank.io and include:

• your name and the email you use to log in
• the client’s name
• the date range you want to check, if you know it

Because the log contains personal information, we’ll confirm your identity before we send it. Emailing us also gives us a written record of your request.

If you’re a client

You can ask your practitioner who has accessed your health record, or email support@healthbank.io directly. We’ll confirm your identity first, then send you the log.

Think someone has accessed data they shouldn’t have?

Email support@healthbank.io straight away and tell us what you’ve noticed. We’ll look into it and let you know what we find. If it turns out to be a data breach, we’ll follow the steps in the Notifiable Data Breaches scheme.