SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/hipaa-automatic-logoff-addressable

What does automatic logoff do for ePHI workstations?

It terminates a session after inactivity and is addressable.

Start playing free

  1. Shuts the computer down every night
  2. Ends a session after a set time of inactivity ✔
  3. Locks the account after failed log-ins

Why: Automatic logoff is an addressable access control. It reduces the risk of unattended screens exposing ePHI.

Huh, didn't know that: The rule lets each organization choose the idle time, calling it a predetermined time of inactivity.

The dad joke
Why did the screen go blank? It was practicing automatic logoff and forgot to say goodbye.
Like this card?
Play the game

References

Answer: Ends a session after a set time of inactivity. Automatic logoff is an addressable access control. It reduces the risk of unattended screens exposing ePHI.

  1. 45 CFR 164.312(a)(2)(iii) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.312
    Automatic logoff (Addressable). Implement electronic procedures that terminate an electronic session after a predetermined time of inactivity.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Work SkillsWhat is electronic protected health information, or ePHI?Work SkillsWho must comply with the HIPAA Security Rule?Work SkillsWhat are administrative safeguards in the HIPAA Security Rule?

That's stuff everyone should know.