Common use of System Logging Clause in Contracts

System Logging. The system must maintain an automated audit trail which can identify the user or system process which initiates a request for PHI or which alters PHI. The audit trail must be date and time stamped, must log both successful and failed accesses, must be read only, and must be restricted to authorized users. If PHI is stored in a database, database logging functionality must be enabled. Audit trail data must be archived for at least 3 years after occurrence.

System Logging. The system must maintain an automated audit trail which can identify the user or system process which initiates a request for Merced PHI or PI, or which alters PHIMerced PHI or PI. The audit trail must be date and time stamped, must log both successful and failed accesses, must be read only, and must be restricted to authorized users. If Merced PHI or PI is stored in a database, database logging functionality must be enabled. Audit trail data must be archived for at least 3 years after occurrence.