One of the least understood and most ignored requirements in HIPAA is called “Workforce Clearance” (WC). This “addressable” requirement is part of the Security Rule’s Administrative Safeguards, and appears at 164.308(a)(3).