skills.rest
mauriciodelrio
mauriciodelrioCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

hipaa

Enforce HIPAA compliance with AES-256 encryption, RBAC, audit logging, and BAA verification.

3|Updated Apr 12, 2026
Search Tags:#audit#compliance#rbac#encryption#hipaa#breach notification
One-click install
npx skills add https://github.com/mauriciodelrio/delriodev-skills --skill hipaa
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hipaa
Source: https://github.com/mauriciodelrio/delriodev-skills/tree/main/en-skills/governance-risk-and-compliance/hipaa
Command: npx skills add https://github.com/mauriciodelrio/delriodev-skills --skill hipaa

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Organizations building software that handles protected health information often struggle to meet the extensive technical, administrative, and physical safeguards required by HIPAA, risking non‑compliance and penalties.

Core Features & Use Cases

  • Access Control: Role‑based permissions, break‑the‑glass emergency access, and session timeout enforcement.
  • Data Encryption: AES‑256‑GCM encryption at rest and utilities for encrypting/decrypting PHI fields.
  • Audit Logging: Comprehensive immutable logs for every PHI access, including user, action, and source details.
  • Breach Management: Automated risk assessment, notification workflow, and documentation for breaches.
  • BAA Verification: Service registry to ensure third‑party providers have active Business Associate Agreements.

Quick Start

Use the HIPAA skill to generate a compliance checklist for a new healthcare web application.

Frequently Asked Questions about hipaa

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce HIPAA compliance for an application handling protected health information?▼

Role-based access control secures protected health information by enforcing user permissions, emergency break-glass access, and session timeout limits. RBAC policies ensure only authorized users access specific PHI fields, reducing unauthorized exposure risks.

What's the best way to implement audit logging for PHI access in healthcare software?▼

Breach management for HIPAA compliance involves automated risk assessment, notification workflow execution, and breach documentation. The process identifies affected PHI, assesses severity, triggers required notifications, and maintains records for regulatory reporting.

Can I use AES-256 encryption to secure PHI fields in a healthcare web application?▼

BAA verification ensures third-party service providers handling PHI have active Business Associate Agreements. The service registry tracks vendor compliance status, preventing healthcare applications from sharing protected health information with unverified associates.

Does this HIPAA compliance solution support emergency break-glass access to protected health information?▼

Yes, this HIPAA compliance solution supports emergency break-glass access to protected health information. The break-glass mechanism grants temporary elevated access during emergencies while logging the event in immutable audit trails for post-incident review.

Related Skills

Explore More Legal & Compliance Skills→
haJ1thaJ1t

healthtech-pro

Ensure HIPAA compliance for healthcare applications with encryption, masking, and audit logging.

Community
Advanced
williamzujkowskiwilliamzujkowski
17

healthtech-hipaa

Enforce HIPAA compliance for PHI handling in healthtech systems.

Community
Advanced
zenobiuszetozenobiuszeto

pci-tokenization

Replace plaintext PANs with HSM-backed FF3-1 format-preserving tokens.

Community
Advanced
jshsakurajshsakura
22

hipaa-compliance

Assess HIPAA applicability and PHI handling gaps in healthcare products.

Community
Advanced