Data Visibility & Responsibility
Every entry you make in SystmOne is visible to other authorized users — within your clinic, across units, and potentially nationwide. This visibility enables seamless care, but it also means incomplete or inaccurate data becomes part of the shared record. This page explains how data moves and why your documentation matters.
How Data Moves
1. Cloud-Based Access
SystmOne runs on centralized cloud infrastructure. Authorized staff can access patient records from any workstation in the clinic or via the MOH network. There is no local server dependency — patient demographics, diagnoses, and history do not need to be re-entered at each visit or when treated in different units.
2. National Patient Database
Every patient registered in SystmOne joins a unified, national database. When a patient transfers from another MOH facility, their record is already available — previous diagnoses, allergies, and active medications are visible to the receiving clinic. This enables seamless cross-clinic continuity without lost paper files.
3. Inter-Unit Visibility
Within a clinic, multi-disciplinary teams (OPD, NCD, MCH, Pharmacy, Lab) can access relevant data entered by other units. A doctor in OPD can see lab results ordered by NCD. A pharmacist can view prescriptions written in the fever clinic. This is controlled by role-based access ISO 27001 DKICT-V5 — you see what you need for your clinical duties, and nothing more.
What This Means for You

Data entered in SystmOne is immediately visible to all authorized users — from frontline clinicians to team leaders, Family Medicine Specialists, and administrators. Incomplete or inaccurate data becomes part of the visible record, impacting referrals, follow-up, reporting, and audits.
"If you don't document your work in SystmOne, it is as if it never happened."
Work not documented in the system is not counted in workload statistics, is not visible to care teams, and cannot be audited. Accurate, timely entries provide:
- Recognition for care actions performed
- Safer, more personalized care planning
- Smooth handovers between staff and units
- Reliable statistics for clinic management and national reporting
Your Responsibility
Every user shares responsibility for maintaining data integrity:
☐ Document during or immediately after the clinical encounter
☐ Verify accuracy of all entries before saving (patient identifiers, dates, coded terms)
☐ Update problem lists — mark resolved conditions and keep active problems current
☐ Use your own login — never document under another user's credentials
☐ Flag errors promptly — use the correction workflow rather than leaving inaccurate data in the record
☐ Respect confidentiality — access only records relevant to your direct clinical or administrative duties
| Security Practice | Why It Matters |
|---|---|
| Log out when leaving a workstation | Prevents unauthorized access under your credentials |
| Verify patient identity before opening records | Protects privacy and ensures correct record access |
| Access only what you need for your role DKICT-V5 | Role-based access is a legal and ethical requirement |
| Report suspicious access immediately | Early reporting prevents data breaches |
| Never share passwords | Every action is logged under your login; you are accountable ISO 27001 9.4.5 / 12.4 ISO 27789 |
When Documentation Is Missing
Incomplete documentation has consequences that extend beyond the individual patient:
| Area | Impact |
|---|---|
| Patient Safety | Next clinician lacks critical context; allergy or medication history may be missed |
| Workload Recognition | Unrecorded activity does not contribute to clinic workload statistics or staff KPIs |
| National Reporting | Incomplete data skews disease surveillance, resource allocation, and policy decisions |
| Medicolegal Protection | Undocumented care is difficult to defend in complaints or legal proceedings |
| Quality Improvement ISO 9001 | Missing data prevents accurate baseline measurement and outcome tracking |
| Continuity of Care | Follow-up appointments, referrals, and care plans rely on complete prior documentation |
"If you don't document your work in SystmOne, it is as if it never happened."
This is not merely administrative — it directly affects patient outcomes, team coordination, and the integrity of Malaysia's national health data.
- Patient data in SystmOne is visible across units and clinics through cloud-based, national infrastructure
- Every entry matters — incomplete or inaccurate data becomes part of the shared record
- Document promptly and accurately — undocumented work is invisible to the system and the care team
- Respect role-based access — view only what you need, log out when done, never share credentials
- All access is permanently logged and subject to periodic audit
