🏥

Problem Scenario

I have PHI (healthcare data) subject to HIPAA

HIGH8 controls

How do I make my Databricks environment HIPAA compliant?

// Quick Win

Enable auto-classification and run the PHI audit query — you'll immediately see who has been accessing health data

// Visualization

Solution Overview

🏥

I have PHI (healthcare data) subject to HIPAA

UC-001

Enable Unity Catalog Audit Logging

AC-002

Implement Attribute-Based Access Control (ABAC)

UC-002

Enable Automatic Data Classification

UC-003

Enforce Tag Policies for Governance

AC-003

Privileged Access Management - Service Principals

DS-001

Encryption at Rest (Platform-Managed)

DS-003

Customer-Managed Encryption Keys (CMK)

AM-001

Audit and Monitoring Alerts

React Flow

This graph shows the 8 recommended controls for solving this problem

// Implementation

Step-by-Step Solution

// Related

Related Controls

UC-001

Critical

Enable Unity Catalog Audit Logging

Audit & Compliance

AC-002

High

Implement Attribute-Based Access Control (ABAC)

Access Control

UC-002

High

Enable Automatic Data Classification

Data Governance

UC-003

Medium

Enforce Tag Policies for Governance

Data Governance

AC-003

High

Privileged Access Management - Service Principals

Access Control

DS-001

Critical

Encryption at Rest (Platform-Managed)

Data Security

DS-003

High

Customer-Managed Encryption Keys (CMK)

Data Security

AM-001

High

Audit and Monitoring Alerts

Audit & Compliance

Back to Problems Browse All Controls

I have PHI (healthcare data) subject to HIPAA

Solution Overview

Step-by-Step Solution

Discover & Classify PHI

Enforce Minimum Necessary Access

Encrypt with Customer-Managed Keys

Enable PHI Access Auditing

Restrict Workspace Network Access

Related Controls

I have PHI (healthcare data) subject to HIPAA

Solution Overview

Step-by-Step Solution

Discover & Classify PHI

Enforce Minimum Necessary Access

Encrypt with Customer-Managed Keys

Enable PHI Access Auditing

Restrict Workspace Network Access

Related Controls