An audit trail of all user activity is maintained for this system, as it provides access to protected health information. Authorized access is limited to users with a need to know for patient care, billing, medical records review, or quality assurance purposes.