Healthcare Phi Compliance

This gives you compliance patterns for protecting patient data in healthcare apps, covering HIPAA, DISHA, GDPR, and general healthcare contexts. It walks through row-level security policies for multi-facility isolation, audit trail schema, and the common ways PHI leaks out (error messages, console logs, URL params, browser storage). The deployment checklist alone is worth having on hand before shipping. Contributed by Dr. Keyur Patel from Health1 Super Speciality Hospitals, so it comes from actual clinical system experience. Use it when you're building anything that touches patient records, setting up access control, or reviewing code for data exposure gaps.

skills.sh installs: 5.5K
GitHub stars: 300.3K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add affaan-m/ecc --skill healthcare-phi-compliance --agent claude-code

Installs into .claude/skills of the current project.

Files

Healthcare PHI/PII Compliance Patterns

Patterns for protecting patient data, clinician data, and financial data in healthcare applications. Applicable to HIPAA (US), DISHA (India), GDPR (EU), and general healthcare data protection.

When to Use

Building any feature that touches patient records
Implementing access control or authentication for clinical systems
Designing database schemas for healthcare data
Building APIs that return patient or clinician data
Implementing audit trails or logging
Reviewing code for data exposure vulnerabilities
Setting up Row-Level Security (RLS) for multi-tenant healthcare systems

How It Works

Healthcare data protection operates on three layers: classification (what is sensitive), access control (who can see it), and audit (who did see it).