HIPAA Security 164.312.a.1 Informational
Access Control (Technical)
Official citation: 45 CFR §164.312(a)(1)
Class: informational · Severity: high
Statement of the obligation — verify against source
45 CFR §164.312(a)(1)
What it means
Restrict ePHI to authorized persons via unique IDs, emergency access, encryption, and automatic logoff.
Required by
- CA CMIA — California Confidentiality of Medical Information Act
- HIPAA — HIPAA Security Rule (industry)
Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.