Control confidential records, and prevent them from showing up in a repository search. Log system activity to demonstrate compliance with regulations.