RE: DB2/400 logging of read only access

["Walden H. Leverich" <WaldenL@xxxxxxxxxxxxxxx>]

> We are not covered by HIPPA regulations but if we were would 
> be adding this to our own applications be the only way to 
> record record level access?

There are also read-triggers. Just like other update triggers, these are
database-level things that you can't get around. However, they're a
performance PIG!

Also, there's nothing in the HIPPA regs that require you to record read
access to every single record. You need to record access to
medical-records, not database-records. For example, if reviewing a
single "medical-record" results in 1 read to the patient table, 2 reads
to the address table (home/office), 5 reads to the phone table
(office/cell/home/emergency/other), 22 reads to the procedure table, 19
reads to the sub-procedure table, and 211 reads to the charges table,
you only have to record 1 access, not 261.

-Walden

--
Walden H Leverich III
Tech Software
(516) 627-3800 x3051
WaldenL@xxxxxxxxxxxxxxx
http://www.TechSoftInc.com

Quiquid latine dictum sit altum viditur.
(Whatever is said in Latin seems profound.)