Runs a HIPAA Privacy and Security Rule checklist over a data pipeline and produces a gap report before deploying OpenMed on PHI.
Tasks
Walk a concrete data pipeline against HIPAA Privacy and Security Rule requirements and emit a gap report indicating met, not-met, or N/A controls with 45 CFR citations and remediation owners
Decide between Safe Harbor and Expert Determination de-identification methods, record the rationale, and attach a signed AuditReport as evidence
Inputs
A data pipeline that will process protected health information
A representative synthetic sample record from the pipeline
Outputs
A gap report covering which administrative, physical, and technical safeguards are met, missing, or N/A
A signed, PHI-free AuditReport documenting removed identifiers
Limitations and checks
This skill is a self-assessment aid, not legal advice
A Privacy Officer must sign off on compliance
Expert Determination requires certification by a qualified statistician
Verify all 18 Safe Harbor identifier categories are removed and confirm no actual knowledge of re-identifiability
Inspect model caches, exception messages, temp files, and logs for raw PHI notes
Confirm a Business Associate Agreement is in place with every downstream vendor that creates, receives, maintains, or transmits PHI
Search
Find projects, verify facts, compare options, and filter by your requirements
Try a searchA click only fills the search box; you stay in control