
164.312(a)(1): Access Control
Implement technical policies and procedures for electronic information systems that maintain ePHI to allow access only to those persons or software programs that have been granted access rights.

164.310(d)(2)(iv): Data Backup and Storage
Create a retrievable, exact copy of ePHI, when needed, before movement of equipment.

164.308(a)(7)(ii)(B): Disaster Recovery Plan
Establish procedures to restore any loss of data.

164.308(a)(7)(ii)(A): Data Backup Plan
Establish and implement procedures to create and maintain retrievable exact copies of ePHI.