Most files are electronic and you can not access them without a ID and password. That is like a fingerprint and a time stamp on who accessed a record and when it was accessed.
Files are audited randomly and in special circumstances to find people who are accessing records without authorization. In some instances, people have been fired for accessing records that they had no business viewing.
Most people value their jobs too much to let their curiosity get the best of them.
Exactly. So, for instance, where I work, I can see the access record of any patient in our dept. Such a record would look similar to the following:
Smith, John Adam 05/25/1962
AA0004948572 AM0000592759
5/31/12 1524 sjones1 NEW_ACCOUNT ENTER
5/31/12 1524 sjones1 PREREG ENTER
5/31/12 1524 sjones1 ROOM ENTER
5/31/12 1526 kshoc3 TRIAGE_NOTE ENTER
5/31/12 1528 kshoc3 TRIAGE_NOTE EDIT
OLD_VALUE: BP -/-
NEW_VALUE: B 164/96
5/31/12 1546 rshaw TRIAGE NOTE VIEW
5/31/12 1549 rshaw ROOM EDIT
OLD_VALUE: WR
NEW_VALUE: UCH48
5/31/12 1550 rshaw PROVIDER ENTER rshaw
5/31/12 1553 nsmith TRIAGE_NOTE VIEW
5/31/12 1553 nsmith TRIAGE_NOTE PRINT
5/31/12 1554 nsmith PROVIDER ENTER jphilip
5/31/12 1555 jphilip EMR VIEW
5/31/12 1556 jphilip EMR PRINT
5/31/12 1600 mschmid REGISTER ENTER
5/31/12 1615 mschmid REGISTER EDIT
INS OLD VALUE: MEDICARE
INS NEW VALUE: SECURE HORIZONS MEDICARE COMPLETE
5/31/12 1620 jphilip PROVIDER_SUMMARY ENTER
5/31/12 1621 smith PROVIDER_DISCHARGE ENTER
5/31/12 1624 jphilip PROVIDER_DISCHARGE EDIT
5/31/12 1630 rshaw PROVIDER_SUMMARY PRINT
5/31/12 1631 rshaw PROVIDER_DISCHARGE PRINT
....
In other words, every single movement is logged. As I understand, there are actually even more in-depth logs that the system keeps for use in internal audits and such. The logs I have access to are generally for basic trouble-shooting at a departmental level. It allows us to quickly figure out from where a mistake might have originated. (This is obviously a simple case example. A real ED visit would have far more activity than this....)