—164.308(a)(4)(ii)(C): Access Establishment and Modification
Implement policies and procedures that establish, document, review, and modify access to ePHI.
—164.308(a)(4)(ii)(B): Access Authorization
Implement policies and procedures for granting access to ePHI.