Report Inappropriate Comments

The policy and ordinance should include a statement that all access to the system and all database queries shall be permanently logged, be a public record available on request without charge, and include all information necessary to enable a full forensic audit. The record should include the name of the person authorizing and performing each access, the information sought and query, and description of event prompting access. A remaining concern would be queries excessively broad or not consistent with the event being investigated, as this is a way to conceal abuse.