The Employee PHI Access Tool HIPAA requires a covered entity to examine the access each employee has to "protected health information." The law specifies that an employee only have access to PHI as necessary to do their job. This is the "minimum necessary" rule. HIPAAps.com provides a very special tool to make this process much easier.  With this tool, you can easily list  the current PHI access of each employee, then review whether this level of access is necessary for that employee to do his or her job. When you are done with this step, an action plan is provided for each employee or job level that more   restriction to PHI.  And HIPAA requires documentation. This tool provides the documentation needed for your HIPAA privacy manual.