2 docs tagged with "minimum-necessary"

HIPAA permits specific uses and disclosures of PHI without patient authorization

Every EHR user should have access to exactly the PHI they need to do their job — nothing more