Access to all electronic Trust systems that hold patient information is audited, so our IT colleagues can see who has accessed a patient record, when they have accessed it and what the purpose of that access was.

If you need to access EPR to support a complaint response, investigate an incident, or support a legal request, you must clearly document the reason for access.

Here is some suggested text. Please use the relevant reason in your note.

Record accessed for the purpose of investigating/ responding to a patient complaint/ incident review/ information request Ref:XXX.