Audit trails in electronic health records serve what purpose?

• A. They automatically fix data errors without user action.
• B. They record who accessed records and what actions were performed.
• C. They replace the need for user authentication.
• D. They are unnecessary in modern systems.

Answer: (B)

Audit trails in electronic health records track who accessed patient records and what actions they performed. This creates a detailed history of every interaction, which supports accountability and protects patient privacy. By logging user IDs, timestamps, which records were accessed, and actions like view, edit, or delete, organizations can detect unauthorized access, investigate incidents, and demonstrate compliance with privacy and security requirements. An audit trail doesn’t automatically fix data errors, doesn’t replace user authentication, and is a necessary feature in modern systems to ensure governance and safety.