164.312(a)

Technical safeguards : Access control. Implement technical policies and procedures to restrict access to protected electronic health information to authorized persons