1670.025 HIPAA Security: Information Access Management for Electronic Protected Health Information Policy
HIPAA Security Standards require that departments and units that create, store, or maintain electronic protected health information protect it from improper or unauthorized access, alteration or destruction.

