HIPAA standard 164.312(d) lays out a roadmap of how to ensure the right person, people, or entity gets access to the sensitive data being requested. MFA is an authentication method used to validate that a user is who they say they are, similar to what a password is used for. WatchGuard’s AuthPoint mobile app can safely store PINs. It’s a mobile application and mobile devices are almost always in the possession of most individuals and can be considered as a “token” or “key””]
Source: https://www.healthcareinfosecurity.com/blogs/hipaa-standard-164312d-mfa-to-rescue-p-2835