phi-handling

Guide software engineers on compliant PHI handling under HIPAA and GDPR.

1|1|Updated May 16, 2026
One-click install
npx skills add https://github.com/aks-builds/healthcareskills --skill phi-handling
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: phi-handling
Source: https://github.com/aks-builds/healthcareskills/tree/main/skills/phi-handling
Command: npx skills add https://github.com/aks-builds/healthcareskills --skill phi-handling

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps software engineers build healthcare applications that comply with PHI (Protected Health Information) handling requirements, reducing the risk of privacy breaches and regulatory non-compliance.

Core Features & Use Cases

  • De-identification Methods: Implement de-identification techniques such as Safe Harbor, Expert Determination, and Limited Data Set to protect PHI.
  • Encryption: Provide guidelines for encryption at rest and in transit to secure PHI.
  • Access Controls: Establish access control models like RBAC and ABAC to manage access to PHI.
  • Retention Policies: Guide on setting up retention schedules for PHI according to HIPAA and GDPR requirements.
  • Use Case: When designing a new EHR system, this Skill ensures that all PHI handling processes are in compliance with healthcare regulations.

Quick Start

Run the phi-handling skill to review and implement PHI handling guidelines in your project.

Frequently Asked Questions about phi-handling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement de-identification methods for Protected Health Information in my application?

Implement de-identification for Protected Health Information using Safe Harbor, Expert Determination, and Limited Data Set techniques. These methods remove or transform specific identifiers in structured data and free text to protect patient privacy under HIPAA and GDPR regulations.

What encryption protocols are required for securing electronic PHI at rest and in transit?

Securing electronic PHI requires implementing encryption protocols at rest and in transit. This Skill provides guidelines for applying encryption to protect Protected Health Information across your healthcare application infrastructure and ensure regulatory compliance.

How do I set up access controls like RBAC and ABAC to manage PHI access?

Set up PHI access controls by implementing Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models. These access control models manage user permissions to ensure only authorized personnel view Protected Health Information within your healthcare application.

How do I configure data retention schedules for PHI under HIPAA and GDPR requirements?

Configure data retention schedules for PHI by applying HIPAA and GDPR retention policies. This Skill guides setting up appropriate retention timelines for Protected Health Information to ensure your healthcare application meets regulatory compliance for data lifecycle management.

Can I use this approach to ensure compliance when designing a new EHR system?

Yes, you can use this approach to ensure compliance when designing a new EHR system. It covers all PHI handling processes, including de-identification, encryption, access controls, and retention, ensuring your electronic health record system meets healthcare regulations.