Only access patient records if you have a legitimate business or care-related reason to do so, or if you have prior documented patient consent. It is never appropriate to access or browse records out of curiosity, or simply because you know the patient. The Joint Office for Compliance (JOC) utilizes several methods of monitoring employee access to the EMR system(s), including audit logs, monitoring software, and Break-the-Glass record prompts, to identify inappropriate access. Inappropriate access to a patient’s medical record may result in termination. Questions? Call JOC at 319-384-8282.