Auditing and monitoring access to patient health data
Key Takeaway
Match the question to the tool: Event Monitoring for who viewed or accessed data and from where, Field History Tracking or Field Audit Trail for who changed a field, Setup Audit Trail for who changed setup, and Login History for who logged in.
Patient health data, or protected health information (PHI), needs a trail that shows who looked at it, who changed it and who changed the security around it. The trail must be kept long enough to satisfy regulations such as HIPAA. Salesforce splits this job across several tools that each answer a different question. Salesforce Shield is a set of security tools you can use to comply with regulations on storing PHI, and it adds the tools that Agentforce Health orgs use to meet PHI compliance rules.
Match the question to the tool
Start with the customer's question, then choose the tool that answers it.
| Question | Tool |
|---|---|
| Who viewed or accessed data, and from where? | Event Monitoring |
| Who changed a patient field, and what was the old value? | Field History Tracking or Field Audit Trail |
| Who changed setup, profiles or permissions? | Setup Audit Trail |
| Who logged in? | Login History |