Each individual must have their own user account to be compliant with the Terms of Use and with the HIPAA Security Rule. Shared or generic user accounts do not meet those requirements.

For more information, Health and Human Services has produced a helpful answer about this requirement of the Security Rule - Does the Security Rule permit a covered entity to assign the same log-on ID or user ID to multiple employees? | HHS.gov.