The ePA in care: Authorised access, not a complete record at one click
The ePA can support care information exchange. Understand access rights, objections, missing documents and the facility’s own documentation responsibilities.
Editorial review:
Background & source findings
Section 352 SGB V defines authorised persons and legal access conditions. Technical availability is not permission for any person or purpose; access must fit the relevant care context. [1]
Gematik describes institution-based access for care services. Available functions depend on integration and software. Institutional authority and the facility's internal staff responsibilities are different issues. [2]
Insured people have objection options affecting the ePA and particular processing or access, and can influence document visibility through the available routes. The ePA is therefore not necessarily a complete historical record. [3]
Scope & limitations
No guarantee is given that every click identifies an individual professional cardholder or that all relevant information is present. Unauthorised viewing is not automatically the specific criminal offence of disclosing professional secrets.
In plain language
Fictional example: A nurse cannot find a transfer document. Rather than assuming no care occurred, the team uses its clarification route and accounts for missing or hidden material.
Practical recommendations
Our recommendation: Check current connectivity and professional access rights. Train staff on purpose restrictions, missing information and prohibited curiosity access. Explain objection routes and respect effective restrictions.
Compare retrieved documents with the current care context; an existing document is not automatically a current instruction. Define reconciliation and communication responsibilities. The ePA supports exchange rather than replacing accountable records and clinical judgement.