 how their data is Collected, Used, and Disclosed."
</p><p>
<em>Approach:</em> The AuditEvent resource can inform this report.
</p><p>
There are many motivations to provide a Patient with some report on how their data was used. There is a very restricted version of this in HIPAA as an "Accounting of Disclosures", there are others that would include more accesses. The result is a human readable report. The raw material used to create this report can be derived from a well recorded 'security audit log', speci