As part of the audit log, you should track the following : [substeps] Which record the user accessed the date it was accessed whether the user viewed the information, updated it, or deleted it [title] Create levels of access. [step] Hipaa also requires that an employee only see the " minimum necessary " information to do their job.
[header] How to make software hipaa compliant [title] Keep an audit log. [step] You need to track who accesses a patient's record. This means that you need to create separate usernames and passwords for each person who has access to patient health information.