Activity log

The activity log is a chronological record of significant actions taken on your record, whether by you, by the State, or by automated systems acting on your behalf. It is your audit trail.

Reach the activity log from the dashboard or directly at eportal.kaharagia.org/activity.

What's logged

Activities recorded in your log include:

• Account events: sign-in (especially from new locations), password changes, second-factor changes, session terminations
• Profile changes: updates to your contact details, photo, signature, communication preferences
• Submissions: applications, petitions, registrations, donations submitted by you
• State actions on your record: decisions on requests, document issuances, status changes
• Programme events: relevant events in State programmes you participate in (Lifeblood donation verifications, etc.)
• Honours: conferral of honours (with link to the Gazette publication)
• Document events: issuance, revocation, replacement
• Inbox events: significant messages received (you don't see one entry per ordinary message; major communications may appear)

Routine browsing activity (which pages you viewed) is not in this log. Browsing is not a meaningful action on your record.

How to use it

The log is your tool for:

• Spotting unauthorised activity: sign-ins from unfamiliar locations, profile changes you didn't make, requests you didn't submit
• Reconstructing a timeline: when did I apply, when was the decision made, when was the document issued
• Confirming an action took effect: particularly useful after submitting a substantive change
• Audit and record-keeping: exporting your activity for your own records

Filtering and searching

The log supports filtering by:

• Date range: limit to a specific period
• Category: account, profile, submissions, decisions, programmes, honours, documents
• Source: actions by you vs. actions by the State vs. automated

You can also search by keyword (matches subject lines and references).

Exporting

If you want a copy of your activity log for your own records (or as part of a data subject access request), use the export option. The exported format is a structured file (typically CSV or JSON) suitable for import into a spreadsheet or other tool.

Spotting suspicious activity

If you see an entry you don't recognise, a sign-in from a country you weren't in, a profile change you didn't make, a submission you didn't authorise:

1. Go to Account security immediately
2. Sign out everywhere except this session
3. Change your password in K-Connect
4. Add or rotate a second factor
5. Regenerate recovery codes
6. Contact us through the contact channel describing what you saw

Treat unfamiliar activity as a security incident until you can rule out account compromise.

Privacy

The activity log is your own record and is not shared with anyone outside the State. Within the State, access is limited to authorised personnel for support, audit, and security purposes. See the ePortal Privacy Notice for full detail.

Retention

Activity log entries are retained for the period appropriate to their nature, security-relevant entries (sign-ins, password changes) for the period required for audit and abuse-detection; substantive entries (submissions, decisions, documents) for the longer periods required by the State's archival rules.

You cannot delete individual log entries, the integrity of the audit trail depends on its immutability. If you have a concern about a specific entry, raise it through the contact channel for review.

Common questions

• "Why don't I see ordinary page views?" Browsing is not a meaningful action on your record. Only substantive events are logged.
• "Can I see who made a change on the State's side?" Where a change was made by an officer, the log shows the originating institution. Personal identity of officers is not normally exposed.
• "My log goes back further than I expected." Activity logs are kept for the periods required by Kaharagian record-keeping; some entries persist for years.
• "I want a complete export of everything you have on me." That's a data subject access request, not just an activity log export. See the ePortal Privacy Notice for the right channel.