One request, five safeguards The technical safeguards of the HIPAA Security Rule, in the order a request meets them Patient app Sign-in authentication Role check access control Row-level security encrypted at rest Audit log audit controls entry written Health records Encrypted link transmission security Animation: a request passes sign-in, a role check, row-level security, an audit log entry and encrypted transport before data is returned