Privacy and retention
Configure EDFlow privacy and access settings: patient and family access windows, sharing limits, the data profile, youth-confidential ages, results display delay, retention periods and de-identification.
Every privacy and access setting shows its allowed range and a plain explanation. Changes that reduce privacy need a typed confirmation and are audited with before and after values.
Access windows
How long patients and family keep read-only access after departure:
| Paramètre | Par défaut | Valeurs permises | Effet |
|---|---|---|---|
access.patientGraceHours | 72 | 0–168 hours | How long patient access lasts after departure (D-05). (Réduit la confidentialité) |
access.familyGraceMinutes | 120 | 0–1440 minutes | How long family links last after departure. (Réduit la confidentialité) |
access.guardianAge | 16 | 0–18 age_years | Guardian mode applies below this age. (Réduit la confidentialité) |
access.youthConfidentialAges.min | 12 | 10–18 age_years | Youngest age for youth-confidential mode (D-43). (Réduit la confidentialité) |
access.youthConfidentialAges.max | 17 | 10–18 age_years | Oldest age for youth-confidential mode. (Réduit la confidentialité) |
access.recipientPrompt | true | boolean | Triage asks who receives the card (D-43). (Réduit la confidentialité) |
access.visitCodeSource | edflow | edflow, ehr_visit_number | Random codes or the EHR visit number (only with attested non-sequential numbers; never under minimal). (Réduit la confidentialité) |
Sharing
| Paramètre | Par défaut | Valeurs permises | Effet |
|---|---|---|---|
sharing.enabled | true | boolean | Patients can share with family. (Réduit la confidentialité) |
sharing.maxLinks | 5 | 1–5 count | Active family links per visit. (Réduit la confidentialité) |
sharing.maxDevicesPerLink | 3 | 1–5 count | Devices per family link (D-14). (Réduit la confidentialité) |
| Paramètre | Par défaut | Valeurs permises | Effet |
|---|---|---|---|
family.showPhotos | false | boolean | Care-team photos in the family view. (Réduit la confidentialité) |
Data profile and masking
- Standard: patients sign in with last name, date of birth and an 8-character visit code.
- Minimal: a 10-character visit code only; patients type the first name they want to be called. Staff register initials.
| Paramètre | Par défaut | Valeurs permises | Effet |
|---|---|---|---|
privacy.dataProfile | standard | standard, minimal | Data minimization profile (EHR §11.3). (Réduit la confidentialité) |
privacy.maskConfidentialNamesOnBoard | true | boolean | Mask confidential names on the board. (Réduit la confidentialité) |
Results
| Paramètre | Par défaut | Valeurs permises | Effet |
|---|---|---|---|
results.displayDelayMinutes | 0 | 0–30 minutes | Delay before a completed result shows as "Back" to the patient. |
results.holdAllowed | true | boolean | Clinicians may hold results (D-29). |
Retention
| Paramètre | Par défaut | Valeurs permises | Effet |
|---|---|---|---|
retention.operationalWindowDays | 30 | 7–90 days | Days PHI is kept before de-identification (F-21.2). (Réduit la confidentialité) |
retention.auditDays | 730 | 730–3650 days | Audit log retention. (Réduit la confidentialité) |
retention.analyticsDays | 730 | 365–2555 days | De-identified analytics retention. (Réduit la confidentialité) |
retention.safetyRecordYears | 10 | 2–30 years | Retention of care records (D-36). (Réduit la confidentialité) |
Safety records (requests, call-backs, pauses, the going-home summary) are kept for the safety-record period so the hospital can answer complaints and reviews. Analytics use de-identified rows with no link to a visit. Legal holds pause deletion. See Access requests and retention.
Related
Dernière mise à jour le
Cette page vous a-t-elle été utile?
Languages
Configure languages in EDFlow: English and French, the site default and active offer of French, up to five safety locales for the safety-critical messages, and translation completeness.
Notifications
Configure EDFlow notification channels per site: push, patient and family text messages (Twilio), email (Resend), the generic lock-screen default, rate caps, sending a test, and clinical communication platforms.