| ID | actors.compliance_officer |
|---|---|
| Description | Reviews access audits and consent records. |
| Key | compliance_officer |
| Type | actor |
| Status | active |
| Attributes | access: audit + attestation, role: compliance |
| Tags |
Table of contents
Guide
Compliance Officer
The Compliance Officer reviews access patterns, attests periodic access reviews and verifies that consent records match what patients signed.
Accountability over convenience
Every PHI read and write should be reconstructable from the audit trail. Their job is to catch the access that shouldn’t have happened — not to block care.