01

Plausible is not necessarily safe

A confident clinical statement can still be wrong or inappropriate for the patient. Once it reaches a record, order or claim, the consequence is more than a poor user experience.

02

Enforce at the point of use

The output should be checked against the applicable clinical and privacy rules before it reaches a downstream system. An exception can be held and sent, with its context, to a clinician who has authority to decide.

03

Make the judgment inspectable

Where HIPAA or 42 CFR Part 2 applies, information handling is part of the control. Preserve the output, check, escalation and clinician's decision as an attributable record rather than overwriting the event.

Basis

HIPAA privacy and security requirements · 42 CFR Part 2 · clinical review and audit-trail principles