Patient access - security considerations about iti.basicaudit HOT 4 OPEN

is there anything in the .query and .description that is useful ever to a patient? The patient might see an interaction that is a concern, they could then bring that interaction to the attention of Privacy office for further detailed analysis (where the Privacy office would have full access to the AuditEvent and others around it).

from iti.basicaudit.

It would be a goalmine of access tokens :)

from iti.basicaudit.

It would be a goalmine of access tokens :)

this is not a helpful comment. I am looking for useful profiling to support a patient access. This comment seems to be indicating that the patient has no right to this data.

from iti.basicaudit.

Then you are not following my line of thought. The access token that goes into the AuditEvent could e.g. have its signature part removed when building the auditevent. Then there would be no issue.

from iti.basicaudit.