+3. Requirements for security and logging.
---+3.1. An EHR system designed to be used by health professionals shall provide reliable mechanisms …
---+3.2. The European logging software component of an EHR system designed to enable access by …
---+3.3. The harmonised software components of an EHR system shall include tools or mechanisms to …
---+3.4. The harmonised software components of an EHR system that store personal electronic health data …

3. Requirements for security and logging.

1. Übersicht

3.1. An EHR system designed to be used by health professionals shall provide reliable mechanisms …

3.1.

An EHR system designed to be used by health professionals shall provide reliable mechanisms for the identification and authentication of health professionals.

3.2. The European logging software component of an EHR system designed to enable access by …

3.2.

The European logging software component of an EHR system designed to enable access by healthcare providers or other individuals to personal electronic health data shall provide sufficient logging mechanisms that record at least the following information on every access event or group of events:

(a)	identification of the healthcare provider or other individuals having accessed the personal electronic health data;

(b)	identification of the specific natural person or persons having accessed the personal electronic health data;

(c)	the categories of data accessed;

(d)	the time and date of access;

(e)	the origin or origins of data.

3.3. The harmonised software components of an EHR system shall include tools or mechanisms to …

3.3.

The harmonised software components of an EHR system shall include tools or mechanisms to review and analyse the log data, or it shall support the connection and use of external software for the same purposes.

3.4. The harmonised software components of an EHR system that store personal electronic health data …

3.4.

The harmonised software components of an EHR system that store personal electronic health data shall support different retention periods and access rights that take into account the origins and categories of electronic health data.

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Standards

2. Identifizierte Anforderungen

Anforderungen
Quelle	Anforderung

3. Zugehörige Standards

Standards
Quelle	Anforderung

Builddate: 05.03.2025 00:00:00 -Doknr: CELEX:32025R0327
EULAW -
EN: Legal acts of the European Union from EUR-Lex, https://eur-lex.europa.eu/. © European Union. Re-use is authorised by Decision 2011/833/EU, provided the source is acknowledged; the consolidated texts are licensed under CC BY 4.0 (EUR-Lex legal notice). Divided into sections and converted into the GRCA format, the wording unchanged. Only the legislation published in the Official Journal of the European Union is deemed authentic.

DE: Rechtsakte der Europäischen Union aus EUR-Lex, https://eur-lex.europa.eu/. © Europäische Union. Weiterverwendung nach Beschluss 2011/833/EU mit Quellenangabe gestattet; die konsolidierten Fassungen stehen unter CC BY 4.0 (Rechtlicher Hinweis von EUR-Lex). In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Verbindlich sind allein die im Amtsblatt der Europäischen Union veröffentlichten Rechtsakte.