164.312(a)(2)(ii) Emergency Access Procedure (Required)
Technical safeguard · Required
The requirement as we hold it
Emergency Access Procedure (Required). Establish procedures for obtaining necessary ePHI during an emergency. NIST recommends break-glass accounts, time-bounded activation, and full logging.
The examiner asks
- Show me the procedure for obtaining ePHI during an emergency, and who can invoke it.
- Where is the break-glass activation logged?
Evidence to bring
- the emergency access procedure
- the break-glass log
Source: 164.312(a)(2)(ii) at eCFR. Our statement of the clause, not the instrument verbatim.