AqtaAqta

HIPAA Security Rule - 45 CFR 164.312(b)

45 CFR 164.312(b) - Audit controls

The HIPAA Security Rule technical safeguards require covered entities and business associates to implement audit controls. 45 CFR 164.312(b) is about recording and examining activity in the information systems that hold electronic protected health information (ePHI).

What 45 CFR 164.312(b) asks for

Implement hardware, software, and/or procedural mechanisms that record and examine activity in information systems that contain or use electronic protected health information.

The field-by-field mapping

Which record fields answer this clause, one by one, comes with the procurement pack and with every pilot. Request the pack.

A receipt is a mechanism that records activity and stays examinable, signed at the time it happened, and it carries a hash of the input rather than the ePHI itself. Designed for the audit-control standard at 45 CFR 164.312(b). Aqta issues signed evidence, not a HIPAA certification.

Read 45 CFR 164.312 on eCFR or read the full open spec at github.com/Aqta-ai/attestation-spec.

← Back to the verifier