The organization should have policies and procedures in place for terminating access to health information when employment ends, the provider, professional or staff are no longer credentialed at the organization, or access to the internal network or system is no longer needed. Ways to do this include revoking access based on the unique user ID of the provider, professional, or staff, or the identification of the mobile device itself. Read more about Termination Procedures [PDF - 415.2 KB].