A health informatician discovers a colleague is accessing patient records without clinical need. What is the MOST appropriate first action?
-
A
Ignore it as an internal matter
-
B
Report it to the privacy officer or compliance department
-
C
Confront the colleague publicly
-
D
Delete the audit logs to protect the colleague