I agree with @bednar though - if you have to worry about what records someone has viewed you should probably just cut off their access completely.