Member States and implementers shall take measures to ensure reliable health professionals' identification, authentication and authorisation. Access policies shall be defined to ensure that only authorised health professionals have access to patients' data. Access policies may reflect domain specific guidelines.