164.308(a)(3)(i) Workforce Security (Standard)
Administrative safeguard · Standard
The requirement as we hold it
Workforce Security (Standard). Implement policies ensuring workforce members have appropriate access to ePHI and that those who should not have access are prevented from obtaining it.
The examiner asks
- Show me how you ensure workforce members have appropriate access and that everyone else is prevented from getting it.
- Where is the list of who currently holds ePHI access, and what makes it appropriate?
Evidence to bring
- the workforce security policy
- the current access list
Source: 164.308(a)(3)(i) at eCFR. Our statement of the clause, not the instrument verbatim.