access control policy and guidelines for EMR to ensure the protection of patient's confidentiality and to guide the. design, custody and use of the clinical information system. It serves as a ....