HIPAA Secure Delivery

Overview

Use this skill to evaluate architecture and delivery choices for healthcare software where privacy, access control, auditability, and operational discipline matter.

Workflow

1. Identify the data types, actors, and system boundaries involved.
2. Trace how protected or sensitive information enters, moves through, and leaves the system.
3. Review access, logging, operational controls, and deployment assumptions.
4. Produce concrete risks, mitigations, and implementation guidance.

Constraints

• Focus on engineering and delivery decisions, not legal advice.
• Highlight where assumptions depend on deployment context or organizational controls.
• Separate baseline safeguards from context-specific enhancements.