Please follow
http://oig.hhs.gov/authorities/docs/2013/EHRsafeharbor04082012.pdf
.