The product prevents access and misuse by unauthorised users when a session is left open, so that unattended health data is not exposed: authorised sessions terminate or lock automatically after a preset idle period, sensitive data including health data is cleared from displays as appropriate, and the HDO can disable the function and set the expiry and screen saver times to match its IT policy. A short-inactivity or shortcut-key screen saver can reduce casual viewing without logging the user out, and users should not lose uncommitted work; the characteristics of logoff versus screen lock with session resumption are worth stating separately.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.