# Hipaa Compliance

> Implement HIPAA security and privacy rules. Configure PHI protections and BAA requirements. Use when handling healthcare data.

- Skill: `majiayu000/hipaa-compliance-2` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add majiayu000/hipaa-compliance-2`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/hipaa-compliance-2/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- License: MIT
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/hipaa-compliance-2

---


# HIPAA Compliance

Implement HIPAA requirements for healthcare data protection.

## HIPAA Rules

```yaml
security_rule:
  administrative:
    - Risk analysis
    - Security management
    - Workforce training
    - Contingency planning
    
  physical:
    - Facility access
    - Workstation security
    - Device controls
    
  technical:
    - Access control
    - Audit controls
    - Integrity controls
    - Transmission security
```

## Technical Safeguards

```yaml
requirements:
  encryption:
    at_rest: AES-256
    in_transit: TLS 1.2+
    
  access_control:
    - Unique user IDs
    - Emergency access procedure
    - Automatic logoff
    - Encryption/decryption
    
  audit:
    - Access logging
    - Activity monitoring
    - Log retention (6 years)
```

## AWS HIPAA Setup

```bash
# Enable CloudTrail for HIPAA auditing
aws cloudtrail create-trail \
  --name hipaa-audit-trail \
  --s3-bucket-name hipaa-logs \
  --is-multi-region-trail \
  --enable-log-file-validation

# Use HIPAA-eligible services only
```

## Best Practices

- Business Associate Agreements (BAAs)
- Minimum necessary access
- Breach notification procedures
- Regular risk assessments