Access to the medical EHR should follow the legal requirements regarding privacy and security. Usually, it’s the designated workers of the healthcare facility and patients, particularly if it’s used for telehealth. The access of the third parties, including insurance companies and business associates, is governed by state or federal laws.