Compliance
Minimum Necessary
Rule that PHI access should be limited to what's needed for the task.
The Minimum Necessary standard (under the Privacy Rule) requires that uses and disclosures of PHI be limited to the minimum needed for the purpose. Treatment is exempt; other uses must scope access. In practice this drives role-based access control inside EHRs.
Related terms
Need help moving patient data?
We’ve done it 140+ times across 70+ EHRs. 15-minute discovery, no pressure.