Quote from theantichick
Speaking from the computer angle, the system should not allow deletions. Whether it's indicated as other posters have stated as still being present with strikethrough or just present on audit, that data should not be able to disappear. I cannot conceive (as a programmer) of a medical records program that would allow it since it's highly regulated. Statutory requirements are VERY prominent and adhered to (not to mention thoroughly tested) during development.
you may be a techie, but i am here to tell you that any proprietary system wherein the user has admin priviledges to the filesystem has the ability to be decompiled (.net is easily decompiled with salamander.net and others)
I am not going to get into the details, but everything electronic boils down to zeros and ones at one point, whether it be in memory or on a disk. There are several tools in a crackers arsenal (many use the term 'hacker' incorrectly) that allow such things to be accomplished.
It may take some time, but even proprietary, encrypted systems wherein an admin did not have access to directly can be 'de-crypted' and accessed without a trace (but it may take some time).
However, it is unlikely that the software would have such a feature anyway as they expect the super user/admin to never do such an activity--the govt. implements systems like this, but a commercial app for a hospital?
i am done with the subject matter. if u disagree, you simply are mistaken. it may not be straightforward, but with the correct set of tools and free access to the filesystem, it most definitely can be done, even with a system that doesnt allowed it under any circumstances. simply loading the record itself brings the data into memory/ram where it can freely be deleted by said tools (there are no file restrictions, ie read only)
but a better way, imo, is to crack the app itself so you have complete control, rather than playing around with other methods.
and heck, the guy is getting paid to do it to.
cracking the encryption, however, wouldnt be 'legal', but it is done every day.
i worked with russian programmers from 1998 to 2009--the things they were capable of were amazing.
and the chinese have government backup, so their resources are unlimited.
I dont know what tools and resources these particular admins have in their It dept. but saying it CANT be done demonstrates a lack of understanding of the underpinnings of electronic files, programs, filesystems, and OS's