skills.rest
Wakewell-Sleep-Solutions
Wakewell-Sleep-SolutionsOFFICIAL
Explore all skills by this author →
GitHub

healthcare-compliance

Implement HIPAA, SOC 2 Type II, and HITRUST CSF compliance patterns in healthcare software.

Updated Aug 23, 2026
Search Tags:#compliance#rbac#healthcare#hipaa#phi#soc-2#hitrust
One-click install
npx skills add https://github.com/Wakewell-Sleep-Solutions/claude-skills-ecosystem --skill healthcare-compliance
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: healthcare-compliance
Source: https://github.com/Wakewell-Sleep-Solutions/claude-skills-ecosystem/tree/main/healthcare-compliance
Command: npx skills add https://github.com/Wakewell-Sleep-Solutions/claude-skills-ecosystem --skill healthcare-compliance

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Healthcare software often fails to meet regulatory requirements (HIPAA, SOC 2 Type II, HITRUST CSF), risking data breaches and non-compliance. This skill provides code-level patterns and governance guidance to embed compliance into software development.

Core Features & Use Cases

  • Audit trails: immutable logs for all mutating operations on PHI with retention and redaction.
  • RBAC and default-deny: least-privilege access controls with centralized policy enforcement.
  • Encryption: at-rest and in-transit with per-tenant keys and rotation, plus field-level PHI encryption.
  • Breach readiness: incident response, breach notification timelines, and design-for-breach patterns.
  • Use cases across vendors, healthcare apps, and cloud services handling PHI.

Quick Start

Begin integrating HIPAA, SOC 2 Type II, and HITRUST controls into your CI/CD with an initial RBAC model, logging, and encryption scaffolding.

Frequently Asked Questions about healthcare-compliance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement HIPAA audit trails for PHI in my healthcare app?▼

To implement HIPAA audit trails, create immutable logs for all mutating operations on PHI, incorporating specific data retention schedules and automated redaction policies to ensure compliance.

What is the best way to set up RBAC for healthcare software processing patient data?▼

The best way to set up RBAC for healthcare software is applying a default-deny, least-privilege access model with centralized policy enforcement to protect patient data.

How do I encrypt PHI at rest and in transit for SOC 2 and HITRUST compliance?▼

Encrypting PHI for SOC 2 and HITRUST compliance requires robust encryption at rest and in transit, utilizing per-tenant keys, key rotation, and field-level PHI encryption.

Does this compliance skill support breach notification workflows and incident response?▼

Yes, this compliance skill supports breach notification workflows by providing incident response guidance, breach notification timelines, and design-for-breach patterns for healthcare apps.

Can I integrate HITRUST CSF and SOC 2 Type II controls directly into my CI/CD pipeline?▼

You can integrate HITRUST CSF and SOC 2 Type II controls into your CI/CD pipeline by scaffolding initial RBAC models, logging, and encryption directly within your build process.

Related Skills

Explore More Legal & Compliance Skills→
Benmore-StudioBenmore-Studio
1

hipaa-compliance-guard

Audits HIPAA technical safeguards in healthcare infrastructure configurations across AWS, GCP, or Azure.

Official
Intermediate
abnejLLCabnejLLC

hitrust-expert

Guide HITRUST CSF compliance assessments and control mapping for healthcare organizations.

Community
Advanced
FoundationForgeFoundationForge

incident-response

Manage incident response workflows for production outages and alerts.

Official
Advanced
Probably-GroupProbably-Group
3

cilium-expert

Generate Cilium eBPF networking configurations for Kubernetes with least-privilege policies.

Official
Advanced