That may be the medical purpose of electronic records, but there's a business purpose -- billing -- and an administrative purpose that includes security and reg

That may be the medical purpose of electronic records, but there's a business purpose -- billing -- and an administrative purpose that includes security and regulatory compliance. All orchestrated by the same software. If I were given one guess, it would be that the medical purpose for authentication is to avoid accidentally corrupting the data, e.g., typing Alice's prescription into Bob's screen. But the authentication technology is distorted by a security purpose that may be unnecessary and is being regularly bypassed. For instance, just having people enter their initials into every entry or screen would go a long way towards eliminating erroneous entry, without being too burdensome.