eCFR 45 CFR 164.312 - Technical safeguards (HIPAA Security Rule)

The four technical safeguards an inference deployment inherits. (a) Access control - unique user identification REQUIRED, automatic logoff ADDRESSABLE, encryption/decryption ADDRESSABLE. (b) Audit controls - 'Implement hardware, software, and/or procedural mechanisms that record and examine activity in information systems that contain or use electronic protected health information.' (c) Integrity. (d) Person or entity authentication. (e) Transmission security. Note which specifications are Required and which are only Addressable: an addressable encryption specification is explicitly weaker than a required one. Title 45 up to date as of 10/01/2026; no changes to this section after 1/03/2017.