# HIPAA 164.308(a)(3)

URL: /systems/trust-and-governance/criteria/hipaa/164-308-a-3 · Id: `criterion:hipaa:164.308(a)(3)`

> Workforce members get appropriate access to electronic protected health information, and others are prevented from obtaining it.

Workforce members get appropriate access to electronic protected health information, and others are prevented from obtaining it.

| Property | Value |
| --- | --- |
| Framework | HIPAA |
| Reference | `164.308(a)(3)` |
| Satisfied by | [Unseated access](/systems/trust-and-governance/controls/unseated-access) |