—164.308(a)(4)(ii)(C): Access Establishment and Modification

Implement policies and procedures that establish, document, review, and modify access to ePHI.