This standard specifies the design, recording, and maintenance of audit trails and audit data, which are used to record all activities in a patient's electronic protected health information (ePHI) and the electronic information systems that host the patient's ePHI information (or any portion thereof). It outlines the scope, purposes, definitions, minimum data elements, access rights, and maintenance requirements for audit data and audit trails, and the security management needed. The standard addresses (1) creating a new patient record, (2) accessing a patient record or any portion thereof, (3) entering data into a patient's record, (4) changing or modifying a patient's record, (5) deleting a patient's record, (6) querying a patient's record, and (7) all other authorized and unauthorized user access data in the patient's ePHI. The standard covers both the audit trails that track the data creations, accesses, views, entries, changes, modifications, deletions, exports, printing, copy and paste actions, scans and imports, and queries and the underlying audit data that shows what activity was performed by the authorized or unauthorized user.
- Standard Committee
- EMB/Stds Com - Standards Committee
- Status
- Active PAR
- PAR Approval
- 2026-09-25
Working Group Details
- Society
- IEEE Engineering in Medicine and Biology Society
- Standard Committee
- EMB/Stds Com - Standards Committee
- Working Group
- Audit Trail Standard - Audit Trail and Audit Data Requirement Specifications for Electronic Protected Health Information
- IEEE Program Manager
- Christian Orlando
Contact Christian Orlando - Working Group Chair
- Nursine Jackson
Other Activities From This Working Group
Current projects that have been authorized by the IEEE SA Standards Board to develop a standard.
No Active Projects
Standards approved by the IEEE SA Standards Board that are within the 10-year lifecycle.
No Active Standards
These standards have been replaced with a revised version of the standard, or by a compilation of the original active standard and all its existing amendments, corrigenda, and errata.
No Superseded Standards
These standards have been removed from active status through a ballot where the standard is made inactive as a consensus decision of a balloting group.
No Inactive-Withdrawn Standards
These standards are removed from active status through an administrative process for standards that have not undergone a revision process within 10 years.
No Inactive-Reserved Standards
