Security, privacy and audit requirements · C0908
What has to happen when someone breaks the glass on a chart?
Designed, not yet built
Short answer
No. The specification describes it, but the pilot does not include it. REQ-4701 says a break-glass access must require an attested reason, produce an immediate audit and alert to the privacy officer, grant scope limited to the patient and duration <=4 h, and be reviewed within 24 h (72 h max). Its acceptance check: timers verified; unreviewed BG escalates.
This is designed, not built.
- Specification item
- REQ-4701
- Specification priority
- P0 (of P0 to P3)
- Tiers
- Small, Medium, Large
Status as of September 30, 2026. Version 0.2.0, synthetic data only. See what's built today. Not legal, medical or security advice.
Related answers
- What can a person not do while in break-glass mode? Pilot
- Does break-glass still work when the network is down? Designed
See it in context: Break-glass and emergency access · Search the help center · Ask a question