#healthcare

Architect HIPAA-compliant patient data storage system. Requirements: 1. Data encryption at rest (AES-256). 2. Data encryption in transit (TLS 1.3). 3. Role-Based Access Control (RBAC). 4. Audit logging of all access events. 5. Business Associate Agreement (BAA) with could provider. 6. Automated backup and disaster recovery. 7. De-identification mechanisms for research. 8. Intrusion Detection System (IDS). Include breach notification protocol.