… evidently unnecessary activity. Passwords in clinical systems expire every 60 or 90 days, apparently … of changing passwords is mentioned in the Administrative Safeguards of the HIPAA Security Rule and … Technology (NIST), an authority on the subject, no longer recommends periodically changing passwords. On … research data demonstrating that frequent and periodic changes of passwords lead to weaker passwords …., periodically).While the initial notion of periodic changes of passwords went across the country very rapidly…