The information recorded in the EHR must remain private and be used only for activities related to patient care and its defined associated resource management functions. This is recognized in PL 104-191 (HIPAA) with respect to those administrative transactions related to events recorded in the EHR. The numerous facets of privacy for the EHR are documented in several ASTM Standards and are primarily procedural rather than technical. It is these procedures that achieve confidentiality of private observations.