hipaa

Enforce HIPAA compliance with AES-256 encryption, RBAC, audit logging, and BAA verification.

3|Updated Apr 12, 2026

Search Tags:#audit #compliance #rbac #encryption #hipaa #breach notification

Ready to run

npx skills add https://github.com/mauriciodelrio/delriodev-skills --skill hipaa

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hipaa
Source: https://github.com/mauriciodelrio/delriodev-skills/tree/main/en-skills/governance-risk-and-compliance/hipaa
Command: npx skills add https://github.com/mauriciodelrio/delriodev-skills --skill hipaa

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Organizations building software that handles protected health information often struggle to meet the extensive technical, administrative, and physical safeguards required by HIPAA, risking non‑compliance and penalties.

Core Features & Use Cases

Access Control: Role‑based permissions, break‑the‑glass emergency access, and session timeout enforcement.
Data Encryption: AES‑256‑GCM encryption at rest and utilities for encrypting/decrypting PHI fields.
Audit Logging: Comprehensive immutable logs for every PHI access, including user, action, and source details.
Breach Management: Automated risk assessment, notification workflow, and documentation for breaches.
BAA Verification: Service registry to ensure third‑party providers have active Business Associate Agreements.

Quick Start

Use the HIPAA skill to generate a compliance checklist for a new healthcare web application.

Frequently Asked Questions about hipaa

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enforce HIPAA compliance for an application handling protected health information?▼

Role-based access control secures protected health information by enforcing user permissions, emergency break-glass access, and session timeout limits. RBAC policies ensure only authorized users access specific PHI fields, reducing unauthorized exposure risks.

What's the best way to implement audit logging for PHI access in healthcare software?▼

Breach management for HIPAA compliance involves automated risk assessment, notification workflow execution, and breach documentation. The process identifies affected PHI, assesses severity, triggers required notifications, and maintains records for regulatory reporting.

Can I use AES-256 encryption to secure PHI fields in a healthcare web application?▼

BAA verification ensures third-party service providers handling PHI have active Business Associate Agreements. The service registry tracks vendor compliance status, preventing healthcare applications from sharing protected health information with unverified associates.

Does this HIPAA compliance solution support emergency break-glass access to protected health information?▼

Yes, this HIPAA compliance solution supports emergency break-glass access to protected health information. The break-glass mechanism grants temporary elevated access during emergencies while logging the event in immutable audit trails for post-incident review.