164.312(b)

Technical safeguards : audit controls (record and examine activity in information systems that contain or use electronic protected health information)