P3: All access to records containing Level 4 data other than access for ordinary business purposes must be logged.See also: Level 4, Paper/Physical Records
Track access to Level 4 information Create a log of user access to level 4 data, identifying user name, date and time of access, and brief justification statement. Note access method (key or swipe).