Ed works at a health clinic that is changing from paper files to an electronic patient-record system. Doctors will use tablet computers to view test results...
Question 1 Report
Ed works at a health clinic that is changing from paper files to an electronic patient-record system. Doctors will use tablet computers to view test results, prescriptions and appointment notes. Records will be stored on a secure server and authorised staff will access them through the clinic network. A trial found that staff could find a patient's allergy information more quickly, but one nurse reported that a tablet was left unlocked in a waiting area. The clinic must decide how to use the system safely while retaining the advantages of digital information.
(a) State three advantages of electronic patient records for a doctor during an appointment. [3]
(b) Which two types of clinic worker should have different levels of access to the records? Describe why their access needs differ. [4]
(c) Explain two possible effects on patients if confidential medical information is accessed by an unauthorised person. [5]
(d) Give two technical controls that could reduce the risk caused by an unlocked tablet. [4]
Answer Details
(a) Electronic records can be found quickly, allowing a doctor to check allergies and prescriptions during treatment. Different authorised staff can see the latest record, handwriting errors are reduced, and results can be shared electronically with another authorised department. State any three. [3]
(b) A doctor needs access to full medical history and prescriptions in order to diagnose and treat a patient. A receptionist needs appointment and contact details to arrange visits, but does not need clinical notes. This difference follows the principle that each worker receives only the access needed for their job. Other appropriate worker pairs are valid. [4]
(c) Unauthorised disclosure could enable identity fraud or blackmail. A revealed medical condition could cause embarrassment, distress, or discrimination. Patients may lose trust and withhold information needed for safe care. If an unauthorised person changes a record, treatment could become unsafe. Explain any two effects. [5]
(d) Use an automatic screen lock after a short inactivity period, so a tablet left unattended is not openly accessible. Require a password, PIN, or biometric check to unlock it. Multi-factor authentication, remote lock/wipe, and encryption of stored data are further valid technical controls. Explain any two. [4]
Download The App On Google Playstore
Everything you need to excel in your exams
