We just finished a dental referral platform that had to be HIPAA-compliant. It moves real patient records between independent dental practices.
I learned a lot building it, and the security code turned out to be the easier part.
I'll post about it over the next few days.
Most audit logs I've seen record what changed. Created, updated, deleted.
On a system holding patient records, that doesn't answer the question you get asked after an incident.
Who looked at this patient?
1/4
My 4th year teaching @laravel at an engineering college as a guest faculty member from industry.
Scraping how I taught it. Syntax matters - you can't debug what you can't read. But starting there made sense when typing code was the slow part.
1/3
Encrypting the data was the easy part of the healthcare project we worked on.
The harder leaks were boring ones, in places we didn't think to check.
Here are three we fixed.
