Logging Access

P3: All access to records containing Level 4 data other than access for ordinary business purposes must be logged.

How to Comply

Track access to Level 4 information

Create a log of user access to level 4 data, identifying user name, date and time of access, and brief justification statement. Note access method (key or swipe).