3 ms·
HIPAA Compliance Checker for Databases
- chaotic_era 3y agoStreamlit based Python script to check popular databases for HIPAA compliance. HIPAA compliance is crucial for databases because it ensures the protection of sensitive patient health information. By adhering to HIPAA regulations, databases can safeguard patient data from unauthorized access, ensuring confidentiality, integrity, and availability.
- claytongulick 3y agoHealthcare tech exec here and former HITRUST auditor. I appreciate the direction this is going, but I'm not sure about its general utility. As an example, audits are commonly performed in middeware in the app stack. Same with permissions. Querying information_schema for sensitive column names isn't particularly useful as a PHI check. Overall, I'm concerned that using this may give application authors a false sense of security, or raise a bunch of false flags. There are many effective paths to compliance, which is why HIPAA is non-prescriptive. After a brief review of the source code, my recommendation would be to migrate this to more of an open source compliance checklist type app, rather than attempting a db level audit. I don't think it's practical to implement something that would be actually effective in the way you're approaching it.
- chaotic_era 3y agoThat's very fair feedback. I've gone ahead and added a disclaimer to that effect to the README. Do you think there's any merit to ensuring database compliance in general? My professional focus is on databases so I want the tooling to be database centric too.