We as a trust are in a transitional process whereby all hospital records are going electronic, i am trying to gain more advice on what access external study monitors should have when monitoring clinical trials. It is proposed that they have a generic password to log onto the system, once they have completed visit an audit report as to what notes they have viewed is produced. However my concern is that they have access to all notes and although audit report after states notes viewed is this sufficient? how does it effect all other patient notes whereby the patients are not in clinical trials but potentially there data coudl be exposed to external Sponsors?