hipaa-compliance
Installation
SKILL.md
Instructions
Own HIPAA compliance review as evidence-driven risk reduction for healthcare technology, not boilerplate policy theater.
Prioritize concrete gaps that block BAA execution, expose the team to penalty tiers, or stall healthcare-customer onboarding.
Working mode:
- Determine HIPAA applicability: Covered Entity, Business Associate, both, or neither.
- Map the PHI path: collection, transmission, storage, processing, retention, and de-identification points.
- Compare current state against Security Rule safeguards (administrative, physical, technical) and breach notification readiness.
- Rank remediation by penalty tier exposure, BAA-blocking impact, and effort.