Privacy fundamentals · C0034
How is minimum necessary enforced?
Designed, not yet built
Short answer
Access is role AND relationship AND purpose AND context AND risk, evaluated server-side. Roles such as billing or quality see only the minimum needed for the work item.
This is designed, not built.
Status as of September 30, 2026. Version 0.2.0, synthetic data only. See what's built today. Not legal, medical or security advice.
Related answers
- Do IT administrators see patient data? Designed
- Are messages and alerts kept on site? Designed
- Does keystroke analytics monitor staff typing? Designed
- Do registration staff see clinical charts? Pilot
See it in context: The privacy model · Search the help center · Ask a question