[Verified Answer]: A celebrity was brought to your facility…

A celebrity was brought to your facility after suffering a suspected heart attack while on vacation. As the IT director, you performed an audit of her records. While the audits showed no external users had been able to breach the network security, during the celebrity’s admission, several employees accessed her records without apparent necessity. One of the employees was from the billing department; one was from a provider office that shares your EHR, and one was an MRI technician from radiology. Recommend an improvement in the authentication process that will offer an additional layer of protection, and provide the details that should be included to enable access to these records. Determine the types of records to which this supplemental process should apply. Explain why the process should apply to the records identified.