HIPAA Access Controls

HIPAA Access Controls: A Practical Guide for Practices

A medical assistant who left 14 months ago still has an active EHR login. That single fact fails four separate Security Rule provisions. Here is what HIPAA access controls require, who owns each task, and what the documentation has to show.