access to portal within 24 hours ... identity proofing and authentication are not unique to APIs) ... Respond to requests for patient data (based on an ID or other token) for all of the data categories specified in the Common Clinical Data Set at one time and return such data (according to the specified standards, where applicable) in a summa ....