Struct HIPAACompliance 

pub struct HIPAACompliance { /* private fields */ }

HIPAA compliance manager

Implementations

impl HIPAACompliance

pub fn new(pool: PgPool, config: HIPAAConfig) -> Self

Create a new HIPAA compliance manager

pub async fn initialize(&self) -> Result<()>

Initialize HIPAA compliance tables

pub async fn log_audit(&self, entry: AuditLogEntry) -> Result<()>

Log an audit entry

pub async fn enforce_retention_policy(&self) -> Result<usize>

Purge old records per retention policy

pub async fn get_audit_log( &self, actor_id: Option<Uuid>, limit: usize, ) -> Result<Vec<AuditLogEntry>>

Get audit log entries

pub fn encrypt_phi(&self, data: &str) -> Result<String>

Encrypt Protected Health Information (PHI) using AES-256-GCM

This provides HIPAA-compliant encryption at rest for sensitive medical data. The encryption uses:

• AES-256-GCM for authenticated encryption
• Argon2 for key derivation
• Random salt and nonce per encryption

Errors

Returns an error if encryption is not properly configured (missing key)

pub fn decrypt_phi(&self, encrypted: &str) -> Result<String>

Decrypt Protected Health Information (PHI)

Decrypts data that was encrypted with encrypt_phi.

Errors

• Returns error if decryption key is not configured
• Returns error if data was tampered with (authentication failure)
• Returns error if wrong key is used

pub fn config(&self) -> &HIPAAConfig

Get the configuration

impl HIPAACompliance

Extension trait for HIPAACompliance to add PII storage hooks

pub fn create_protected_record( &self, text: &str, entity_id: Uuid, agent_id: Uuid, room_id: Uuid, storage_hook: &PIIStorageHook, ) -> Result<ProtectedDataRecord>

Create a protected data record with PII detection

pub async fn initialize_protected_storage(&self) -> Result<()>

Initialize protected data storage table

pub async fn store_protected_data( &self, record: &ProtectedDataRecord, ) -> Result<Uuid>

Store a protected data record

pub async fn get_protected_data( &self, id: Uuid, accessor_id: Uuid, access_level: AccessLevel, ) -> Result<Option<(String, PIIDetectionResult)>>

Retrieve protected data with access control