I'm making a web app that will be used in doctors offices and the majority of the users will be elderly. I'm trying to make my registration as simple as possible, and one of the ways I've come up with is having them only choose a username & password; then they enter a referral code which will pull their data from a db using that code. When I got to trying to program it, I ran into a problem with querying the mongodb when creating the user to get the data from the referral code. I'm now trying to think of another way to implement the same idea or another idea which may be more efficient. Just in case you need to know I'm using Node.js, MongoDB, snd Mongoose.js as my DB interface. Any suggestions?
Before you begin doing ANY work, you need to know about HIPAA if you're working with patient data. Here's something I googled about MongoDB and HIPAA:
[url]https://www.mongodb.com/blog/post/making-hipaa-compliant-applications-mongodb[/url]
[QUOTE=proboardslol;52451677]Before you begin doing ANY work, you need to know about HIPAA if you're working with patient data. Here's something I googled about MongoDB and HIPAA:
[url]https://www.mongodb.com/blog/post/making-hipaa-compliant-applications-mongodb[/url][/QUOTE]
I've thought about this and have made it so that the application has no information that would identify a patient. The app doesn't handle/store any personal details and only references their chart numbers.
I'm actually in the process of creating similar software for veterinary clinics who are clients of my company. Thankfully, we're handling animals so HIPPA doesn't apply but I'm using regular MySQL.
[QUOTE=MexicanR;52451780]I've thought about this and have made it so that the application has no information that would identify a patient. The app doesn't handle/store any personal details and only references their chart numbers.[/QUOTE]
Even then, any kind of software you sell to the medical industry is going to be subject to software auditing to see what data it's handling and if it's secure or not
The feds like to audit whatever and whenever the fuck they want. They've already done it to us. Don't skimp on security. Offsite hosting whenever possible since most datacenters should have HIPAA compliance as a selling point.
Sorry, you need to Log In to post a reply to this thread.
