Question: is mfa required for hipaa?
Answer: The Health Insurance Portability and Accountability Act (HIPAA) requires covered entities to verify that a person seeking access to electronic protected health information (ePHI) has authorization. Two-factor authentication. ... can satisfy this HIPAA requirement (1HIPAA Security Rule, 45 CFR 164 (2007).).