The friend of a nurse who works in an acute care hospital asks the nurse to review the adult daughter's electronic medical record (EMR) to determine if she is honestly disclosing her medical condition. The nurse's reply should include which information? Select all that apply.

A. EMR systems track access attempts, which ensures accountability and transparency regarding who views the records. B. The nurse must obtain the daughter’s permission to share her health information, as it is protected under confidentiality laws. C. The nurse should encourage the friend to address concerns directly with the daughter, as unauthorized access to the EMR is unethical and illegal. D. Unauthorized access to the EMR for personal reasons violates patient confidentiality and is not allowed. E. Access to the EMR is restricted to personnel directly involved in the care of the client, ensuring patient privacy and data security.