[header] How to make software hipaa compliant [title] Keep an audit log. [step] You need to track who accesses a patient's record. This means that you need to create separate usernames and passwords for each person who has access to patient health information. 
As part of the audit log, you should track the following : [substeps] Which record the user accessed the date it was accessed whether the user viewed the information, updated it, or deleted it [title] Create levels of access. [step] Hipaa also requires that an employee only see the " minimum necessary " information to do their job.