What does an audit trail refer to in protecting electronic PHI in a clinic's information system?

• A. A password policy document.
• B. A protocol for physical access to the server room.
• C. Keeping a record of access to electronic PHI to monitor who accessed what and when.
• D. A form used for patient privacy notices.

Answer: (C)