User guide

Care access and clinical records

Review a practitioner request before granting temporary access to your passport.

Care access lets you approve a verified practitioner's request to read and add records for a limited time. Scanning your code requests access; it does not grant access by itself. This flow is in development and requires the relevant app build and service.

How do I show my passport code?

Open Care access from Records and select Show passport QR when you are with the practitioner. The code is for one use and expires after five minutes. It contains a temporary token, not your medical records.

The code is scanned only inside the MedBuk+ app, by a verified practitioner. A normal phone camera will not open it, and it is not a link to send. Sharing with a doctor works once your clinic has joined MedBuk+ and its doctors are verified. On the web app, Share with a doctor explains the steps and links to Get the app, because sharing happens in the phone app.

The practitioner uses their verified account to request access. Keep the care screen open or refresh it to see the request. If the code has expired, generate another when you are ready.

What will my doctor see?

Before you approve, the request shows a preview of exactly what the doctor will see:

  • Your saved passport entries: blood pressure, glucose, weight, height, heart rate and meals. For meals that includes what you ate, the meal type and the energy estimate. Each entry shows its time, how it was recorded and any confidence figure.
  • Records that doctors have added to your passport, with their name and registration.
  • Not the entries you have removed from your passport. Removed (hidden) entries are never shown to a doctor.

The doctor can also add a consultation or prescription record while access is active. Each record keeps their name and registration. MedBuk+ shows your values as saved and does not say what they mean. Approving gives no access to your employer or to a pharmacy.

What should I check before approving?

Review the practitioner's name, organisation, registration details and the preview of what they will see. Decline a request you do not recognise.

Read the displayed notice. It appears in one language: Malay if your app is in Malay, otherwise English. Then choose how long access lasts: 15 minutes, 30 minutes or 1 hour. The approval button names the length you chose. Select the approval checkbox and then the approval action only when you agree to that access. If the doctor's verification ends sooner than the length you would choose, only the lengths that fit are offered, or the button names the time access will end. Each request needs its own approval, and access ends at the time shown even if you do nothing.

Can I withdraw access?

Yes. While access is active the request shows a live countdown of the time left and a Revoke access now button. Select it to end access straight away. Access also ends by itself at the displayed time. If a change is not confirmed, refresh and retry; do not assume that a failed request has revoked access.

Revocation prevents further access through that permission. It does not erase records already added or recall information someone has already viewed or exported.

Where do practitioner records appear?

Consultation and prescription records appear in your clinical record history with the author's name, registration information, organisation and recording time. Corrections create a new revision and retain the earlier record in the history.

These are records authored by a practitioner, not diagnoses or treatment recommendations generated by MedBuk+. A stored prescription record is not an order placed with a pharmacy.

Workplace leave review is separate. Sending a leave request does not approve care access or share your clinical records with your employer.

On this page