domains / families / security / hipaa-compliance

hipaa-compliance

combined

Implement HIPAA security and privacy rules. Configure PHI protections and BAA requirements. Use when handling healthcare data. Ensure HIPAA compliance when handling PHI (Protected Health Information). Use when writing code that accesses user health data, check-ins, journal entries, or any sensitive information. Activates

When to use

• Building or operating systems that handle electronic Protected Health Information
• Configuring cloud infrastructure for HIPAA-eligible workloads
• Establishing Business Associate Agreements with vendors
• Implementing technical safeguards for PHI protection
• Preparing for HIPAA compliance audits or OCR investigations

When not to use

• Guidance and checklists only; not legal advice and not a substitute for a qualified auditor.
• Docs-only import: upstream templates and scripts not bundled.

Skill page

Conflict

The first two copies are the same framework-level HIPAA skill (one is a mirror of the other), while the third is a distinct, application-level skill for a specific recovery-coach codebase. The framework copies provide regulatory mappings and cloud encryption/access checklists, but they lack the concrete code patterns, audit logging utilities, data sanitization rules, session security parameters, and break-glass procedures found in the third copy. Conversely, the third copy lacks the comprehensive regulatory framework and multi-cloud encryption checklists. Combining them is necessary to capture both the regulatory framework and the specific implementation constraints.