Log when sensitive data is accessed

[hholthuis]

Hi,

This is my first post since this is the first time I've not been able to find the answer to my question elswhere.

Im am considering helping healthcare worksers with insights considering their treatments. These insights will include references (if pseudonymised) to actual patients. By Dutch law (art. 15e Wabvpz ), a patient can request for a report on who accessed their data and when. But I don't see how I can provide that when I use Power Bi Import datasets.

I know about marking sensitivity labels, which can apply to reports and datasets and restrict/log certain actions but this does not help me. I'm looking for a way to report what data was provided to a user at what time. Much like I would be able to do with SSAS extended events.

Is this at all possible?

thanks in advance.

[GilbertQ · Accepted solution]

Hi @hholthuis 

You could use the Power BI Audit log which will tell you which users accessed which reports.

Track user activities in Power BI - Power BI | Microsoft Docs

Other than that there is no way to go lower and understand who viewed what actual data within the reports.

[hholthuis]

Hi @GilbertQ

I suspected as much but thank you for confirming. Report level logging doesn't cut it.

I might investigate placing the Patient dimension on some other storage that allows detailed tracing and connect from powerbi using direct query and SSO

[GilbertQ]

Hi @hholthuis 

Yeah I think that would be your best option to ensure the correct auditing!