Mayo Clinic's Experience with Portal Security Lessons Learned : Online validation challenges Proxy rights without a limit on the viewable information even if restrictions were requested Patient accounts with similar names or clinic numbers merged Tips It's important to have good audit logs to determine what was viewed / accessed when security issues.