Information security is . a challenge for medical institutions because of the number of people who need rapid access to it not required by law accomplished by tightly limiting access to electronic information a factor that does not get much attention in the law