45 CFR § 164.312 - Technical safeguards

Publisher

Legal Information Institute (Cornell Law School), reproducing the eCFR

URL

https://www.law.cornell.edu/cfr/text/45/164.312

Published

unknown

Updated

unknown

Accessed

2026-10-01

HTTP status

200

License

US federal regulation text is public domain; public-domain regulatory text; short excerpts and locators only

Source notes citing this source

• The Security Rule audit controls standard requires hardware software or procedural mechanisms that record and examine activity in information systems that contain or use ePHI. in context
• Automatic logoff after a predetermined time of inactivity is an addressable not a required implementation specification under the current Security Rule. in context
• A mechanism to encrypt and decrypt ePHI is an addressable access-control implementation specification under the current Security Rule. in context
• Encryption of ePHI transmitted over an electronic communications network is an addressable implementation specification under the transmission security standard. in context
• Assigning a unique name or number for identifying and tracking user identity is a required access-control implementation specification. in context

Cite this source record

APA

WarmTransfer. (2026, October 1). 45 CFR § 164.312 - Technical safeguards. WarmTransfer. https://warmtransfer.net/knowledge/sources/cornell-lii-45-cfr-164-312

BibTeX

@misc{warmtransfer-cornell-lii-45-cfr-164-312,
  title  = {45 CFR § 164.312 - Technical safeguards},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/cornell-lii-45-cfr-164-312},
  note   = {Legal Information Institute (Cornell Law School), reproducing the eCFR, accessed 2026-10-01}
}