1670.015 HIPAA Security: Authentication and Audit Controls for Electronic Protected Health Information Policy
HIPAA Security Standards require that departments and units that create, maintain or transmit electronic protected health information protect it from unauthorized access, improper alteration or destruction.

