01
02
Temporary access granted "for now"
that never gets revisited.
03
04
01
Access control, audit logs, periodic
review of ePHI access.
bigger penalties for
unauthorized ePHI access.
02
03
04
Legacy clinical systems, department
point solutions, acquired-entity apps.
Audit logs, sandboxing, human approval
at every step; no black box.