Protected Health Information Handling

What problem does it solve?

This Skill addresses the critical need to identify, protect, and manage Protected Health Information (PHI) within software systems, ensuring compliance with privacy regulations and minimizing data breach risks.

Core Features & Use Cases

• PHI Identification & Classification: Automatically identify and tag data elements containing PHI.
• Data Minimization: Enforce the "minimum necessary" principle for data collection, storage, and transmission.
• Encryption & Access Control: Ensure PHI is encrypted at rest and in transit, with robust access controls and auditing.
• Retention & Deletion: Implement policies for data retention and secure deletion or de-identification.
• Use Case: When developing a new patient portal feature that stores medical history, this Skill ensures that only essential patient data is collected, encrypted, and accessible only by authorized personnel, with a clear policy for data deletion after a specified period.

Quick Start

Apply the PHI handling skill to ensure all patient data stored in the new user profile feature is encrypted and access-controlled.