An EHR is a collection of electronic health information that provides immediate access and may include decision support tools. Ensuring legal compliance of EHRs involves addressing privacy, security, and anti-kickback concerns under HIPAA as well as maintaining record integrity through access controls, authentication, accuracy, authorship tracking, and auditing of amendments and alterations.