SecurityGeneral
HIPAA
Also written as PHI, Protected Health Information
US regulation governing health information — dictates how patient data may be stored, transmitted and accessed, with serious penalties attached.
Think of it like
Medical records treated like controlled substances: locked, logged, and accounted for.
Junior or senior?
Domain-specific and hard to fake. A candidate who has genuinely built under HIPAA can describe audit logging and access controls in concrete terms.
Ask them
“How did you handle access logging and audit trails for patient data?”