checking-hipaa-compliance
部署前快速识别合规缺口，适合处理受保护健康信息的团队使用。
提供合规建议不构成法律意见，最终需法律/合规团队复核。
对数据流水线执行 HIPAA 隐私与安全规则检查并生成差距报告。
按 HIPAA 的 Privacy Rule 和 Security Rule（45 CFR 164）逐项检查数据流水线，输出差距报告和改进建议，确保在处理 PHI 前满足合规要求。在部署 OpenMed、要起草或评估 BAA、或需要证明最小必要与去标识措施时用。特色是把行政、物理和技术性保障逐条对应出缺口，并指导 Safe Harbor/Expert Determination 和去标识、文档化工作。
▸ 展开 SKILL.md 英文原文
Runs a HIPAA Privacy and Security Rule checklist over a data pipeline and produces a gap report before deploying OpenMed on PHI. Use when the user is about to process protected health information, needs a pre-deployment compliance review, wants to know which administrative, physical, and technical safeguards apply, is scoping a Business Associate Agreement, or must document minimum-necessary and de-identification controls. Trigger keywords: HIPAA, Privacy Rule, Security Rule, 45 CFR 164, PHI, BAA, business associate, minimum necessary, safeguards, Safe Harbor, Expert Determination, gap analysis, compliance review. Pairs adjacent to OpenMed: the checklist shows where openmed.deidentify and signed audit reports satisfy the de-identification and audit-control requirements. The control list lives in references/hipaa-checklist.md. This is a structured self-assessment aid, not legal advice.
帮我安装这个 skill：https://raw.githubusercontent.com/maziyarpanahi/openmed/master/skills/checking-hipaa-compliance/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/maziyarpanahi/openmed/master/skills/checking-hipaa-compliance/SKILL.md"# Checking HIPAA compliance before deploying on PHI Before any pipeline touches **protected health information (PHI)**, the operating entity (a covered entity or its business associate) must have the HIPAA **Privacy Rule** and **Security Rule** safeguards in place. This skill walks a concrete pipeline against those requirements and emits a **gap report**: which controls are met, which are missing, and where OpenMed's on-device de-identification and signed audit trail satisfy a requirement. The full control list — administrative, physical, and technical safeguards with their 45 CFR citations — is in [references/hipaa-checklist.md](references/hipaa-checklist.md). This skill is a **self-asses