Health / Medical Data Exposure
Overview
Protected Health Information (PHI) under HIPAA includes diagnoses, medications, treatment history, and health identifiers. Improper handling creates legal liability and severe breach consequences.
Remediation
- Encrypt PHI at rest and in transit
- Implement audit logging for all PHI access
- Apply minimum necessary access principles
- Never log PHI without encryption and access controls