Activities / Who the operator is
Handles health records
handles_health_records
Your app stores or processes a person's medical history, diagnosis, treatment, or other health information.
- scope role
- in the registry since 1.0
- 215 laws in 122 jurisdictions name it
What triggers it
The lint's definition. It is a Health Insurance Portability and Accountability Act (HIPAA) covered entity or business associate, or a health-sector entity under a national regime. Storing health data does not make an app one; being the regulated party does.
This covers a patient portal, a fitness app that stores a diagnosis a user enters, and a scheduling tool that records the reason for a medical visit.
What does not
A step counter with no diagnosis or health condition attached does not count on its own.
Often confused with Provides financial services.
The law it brings into scope
The kinds of law that name this activity in the LexLint law library, with the number of laws and jurisdictions in each, as of . The examples are chosen by rule, laws in force first and the widest jurisdiction first; each section's page lists every law.
| Area of law | Laws | Jurisdictions |
|---|---|---|
|
Cybersecurity law
Build software securely, handle reported flaws, and report incidents on a deadline. |
110 | 55 |
|
Privacy law
Have a legal basis for personal data, honor people's rights over it, and report a breach. |
93 | 72 |
|
AI law
Tell people when they are dealing with an AI system or its output, and control the uses the law calls high-risk.
|
12 | 11 |
In a declaration
A role says who operates a product, so it is declared in the product's
own lexlint.yml and never in a component's
ACTIVITIES.md: a library cannot make the product that uses
it a regulated party.
In lexlint.yml
History
In the registry since version 1.0, .
In the glossary: Handles health records.
The activity registry is LexLint's open list; this page's text is licensed under Creative Commons Attribution 4.0.