What problem does it solve?
Provides actionable patterns and guardrails to prevent unauthorized exposure of Protected Health Information (PHI) and Personally Identifiable Information (PII) in healthcare applications, reducing legal risk and data breaches while enabling safe access for authorized clinicians.
Core Features & Use Cases
- PHI/PII Classification & Schema Tagging: Guidance for marking sensitive columns and treating identifiers as PHI versus PII for operational handling and compliance.
- Access Control & Row-Level Security: Patterns to implement RLS policies and multi-facility isolation so staff only see permitted patient records.
- Audit Trails, Secure Logging & Deployment Checklist: Definitions for tamper-resistant audit entries, safe logging practices, and a pre-deployment checklist to remove PHI from errors, URLs, and client code.
- Real-world Example: Use RLS to ensure a doctor at Facility A cannot query Facility B patients and log every read with an opaque internal record ID.
Quick Start
Use the healthcare-phi-compliance guidance to create an RLS policy, an insert-only audit schema, and a pre-deployment checklist that prevents PHI leaks.
