hipaa-compliance

Protected Health Information (PHI) includes health data, check-ins, journal entries, and sensitive user information. This Skill clearly defines what constitutes PHI within your application context and enforces guidelines for audit logging all access and modifications to it.

To implement audit logging for PHI access, this Skill provides guidelines to log all access and modifications, including security events and admin actions. It also offers data sanitization examples to prevent sensitive fields from being inadvertently logged during telehealth document handling.

Handling health data requires strict session security to maintain HIPAA compliance, including enforced session timeouts, maximum session durations, and secure login procedures. This Skill defines these requirements to ensure user sessions handling sensitive information are properly secured.

Managing emergency access to PHI without violating HIPAA compliance involves using Break Glass access procedures. This Skill manages emergency access by enforcing enhanced auditing and justification requirements whenever users bypass normal security controls during an emergency.

Yes, this HIPAA compliance skill supports data sanitization by providing guidelines and examples for preventing sensitive data from being logged. It ensures that inadvertently included sensitive fields are sanitized so your application logs remain compliant with data privacy standards.

You need to apply HIPAA compliance guidelines to user journal entries whenever your application stores or processes sensitive health information. This Skill ensures all access to user journal entries is properly audit logged and handled according to PHI security requirements.