ic changing of passwords, the use of biometrics, the use of tokens or other technology as determined appropriate by the council. (3)Requiring a delay in releasing sensitive health care test results and other similar information to patients directly in order to give physicians time to contact the patient. (4)Recommendations for entities operating IHRTs, including requiring analysis of the potential