# HIPAA 164.308(a)(4)

URL: /systems/trust-and-governance/criteria/hipaa/164-308-a-4 · Id: `criterion:hipaa:164.308(a)(4)`

> Access to electronic protected health information is authorized consistent with the minimum necessary.

Access to electronic protected health information is authorized consistent with the minimum necessary.

| Property | Value |
| --- | --- |
| Framework | HIPAA |
| Reference | `164.308(a)(4)` |
| Satisfied by | [Task-bound access](/systems/trust-and-governance/controls/task-bound-access), [Permission decay](/systems/trust-and-governance/controls/permission-decay) |