Hipaa Compliance

This is the routing layer for HIPAA work. It doesn't implement the compliance rules itself, it decides whether your task needs them and then delegates to healthcare-phi-compliance for the actual PHI handling, logging, and encryption patterns. Use it when the request explicitly mentions HIPAA, covered entities, BAAs, or US healthcare compliance. The skill adds decision gates on top of the broader healthcare privacy work: is this PHI, does the vendor have a BAA, is access scoped to minimum necessary, are events auditable. It keeps you from accidentally logging patient data in error messages or sending PHI to an LLM without the right contract in place. Thin by design, which is probably right for a compliance entry point.

Install to Claude Code

npx -y skills add affaan-m/ecc --skill hipaa-compliance --agent claude-code