Workforce Clearance Procedures, v1.0
Specifies that a health care related organization must implement procedures to determine that the access of a workforce member to electronic protected health information is appropriate.
Assessment Step
1
Appropriate Access (AppropriateAccess)
Does the covered entity or business associate implement procedures to determine that the access of a workforce member to electronic protected health information is appropriate?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) that support the assessor's response to this assessment step.
|
A covered entity or business associate must perform these requirements in accordance with Section 164.306 (Security standards: General rules).
Conformance Criteria (1)
Determine Appropriate Access
The covered entity or business associate must implement procedures to determine that the access of a workforce member to electronic protected health information is appropriate.
Citations
HIPAA-Security-Rule
45 CFR Section 164.308(a)(3)(ii)(B)
HIPAA-Security-Rule
45 CFR Section 164.306
|