OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.524

164.524(a)(3)(iii)

paragraph (action item)

The request for access is made by the individual's personal representative and a licensed health care professional has determined, in the exercise of professional judgment, that the provision of access to such personal representative is reasonably likely to cause substantial harm to the individual or another person.

164.524 Access of individuals to protected health information.

Related Frameworks

1 mapping across 3 frameworks
SCF1 mapping
PRI-06Data Subject Empowerment
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (23) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-3(14)Individual Access
1.00
AT-1Policy and Procedures
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CM-1Policy and Procedures
1.00
CP-1Policy and Procedures
1.00
IA-1Policy and Procedures
1.00
IR-1Policy and Procedures
1.00
MA-1Policy and Procedures
1.00

+13 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (4) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-003654
1.00
CCI-003655
1.00
CCI-003656
1.00
CCI-005025
0.50

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.