Information Access Management II

The next Information Access Managment task is to implement policies and procedures for granting access to EPHI. This is an addressable task. Your job descriptions should include the need for access to EPHI where applicable. Procedures need to be in place to insure that access to EPHI is given where appropriate and withheld where necessary. This should include the limitations on access. For instance access may be granted for only a limited set of patients, etc.