Forum Discussion

hholthuis's avatar
hholthuis
Frequent Visitor
5 years ago
Solved

Log when sensitive data is accessed

Hi,

 

This is my first post since this is the first time I've not been able to find the answer to my question elswhere.

 

Im am considering helping healthcare worksers with insights considering their treatments. These insights will include references (if pseudonymised) to actual patients. By Dutch law (art. 15e Wabvpz ), a patient can request for a report on who accessed their data and when. But I don't see how I can provide that when I use Power Bi Import datasets.

 

I know about marking sensitivity labels, which can apply to reports and datasets and restrict/log certain actions but this does not help me. I'm looking for a way to report what data was provided to a user at what time. Much like I would be able to do with SSAS extended events.

 

Is this at all possible?

 

thanks in advance.

3 Replies

    • hholthuis's avatar
      hholthuis
      Frequent Visitor

      Hi GilbertQ

       

      I suspected as much but thank you for confirming. Report level logging doesn't cut it.

       

      I might investigate placing the Patient dimension on some other storage that allows detailed tracing and connect from powerbi using direct query and SSO

      • GilbertQ's avatar
        GilbertQ
        Super User

        Hi hholthuis 

         

        Yeah I think that would be your best option to ensure the correct auditing!