healthcare-data-compliance-expert
Assess Healthcare Data Compliance
Healthcare data projects face strict consent, privacy, genetic resource, ownership, and transfer requirements in China. This skill structures risk assessments and practical compliance paths.
๋ด ์์ด์ ํธ๋ก ์ค์น
์ด ์์ฒญ์ ์์ด์ ํธ์ ๋ณต์ฌํ์ธ์. ๊ณต์ Skill ํ์ด์ง์ ๋งค๋ํ์คํธ๊ฐ ํฌํจ๋์ด ์์ต๋๋ค.
Review the Skillstore skill "healthcare-data-compliance-expert" from https://skillstore.io/skills/dhturing-healthcare-data-compliance-expert.md and its manifest at https://skillstore.io/api/skills/dhturing-healthcare-data-compliance-expert/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.์์ด์ ํธ๋ ๊ณ์ํด์ ๊ณํ์ ํ์ํ๊ณ ๋ณด์ ์ ์ฑ ์์ ์๊ตฌํ๋ ํ์ธ์ ์์ฒญํด์ผ ํฉ๋๋ค.
์์ด์ ํธ๊ฐ ์ฝ๊ธฐ ์ฌ์ด ๋ฆฌ์์ค
AI ์์ด์ ํธ, ํฌ๋กค๋ฌ, ์คํฌ๋ฆฝํธ๊ฐ ์ ์ฒด ํ์ด์ง ๋์ ์ ๋ฆฌ๋ ์ปจํ ์คํธ๋ง ํ์ํ ๋ ์ด ๋งํฌ๋ฅผ ์ฌ์ฉํ์ธ์.
ํ ์คํธํด ๋ณด๊ธฐ
"healthcare-data-compliance-expert" ์ฌ์ฉ ์ค์ ๋๋ค. Can deidentified CT images be used to train a diagnostic model?
์์ ๊ฒฐ๊ณผ:
- Decision: More information and remediation are required before use.
- Confirm whether deidentification prevents reidentification and removes embedded image metadata.
- Verify patient authorization, ethics approval, purpose limits, retention, and model partner access.
- Treat the images as sensitive personal information unless true anonymization is demonstrated.
"healthcare-data-compliance-expert" ์ฌ์ฉ ์ค์ ๋๋ค. A hospital plans to provide genetic data to an overseas research partner.
์์ ๊ฒฐ๊ณผ:
- Decision: Stop external provision until regulatory screening is complete.
- Confirm whether the data qualifies as human genetic resource information.
- Document consent, ethics review, collaboration structure, recipient, purpose, and transfer route.
- Obtain specialist legal review and confirm current approval, filing, and transfer requirements.
"healthcare-data-compliance-expert" ์ฌ์ฉ ์ค์ ๋๋ค. Who should sign a contract for a hospital data analytics project?
์์ ๊ฒฐ๊ณผ:
The hospital is usually the contracting data controller, but the authorization chain must cover the proposed purpose. Confirm patient rights and physician-related issues.
๋ณด์ ๊ฐ์ฌ
์์ All 13 static findings are false positives. The cited backticks, paths, and URLs are documentation, while the entropy alerts reflect normal Chinese text rather than obfuscation.
์ํ ์์ธ
๐ ํ์ผ ์์คํ ์ ๊ทผ (2)
โ๏ธ ์ธ๋ถ ๋ช ๋ น์ด (3)
๐ ๋คํธ์ํฌ ์ ๊ทผ (2)
์ด ๋ณด๊ณ ์ ๊ณต์ ๋ฐ ์ธ์ฉ
๋ฒ์ ์ด ์ง์ ๋ ํ๊ฐ ๋ณด๊ณ ์, ์ค๋ฆฝ ๋ฐฐ์ง, ์๋ฒ ๋ ์นด๋ ๋ฐ ์ธ์ฉ์ ๊ณต์ ํ์ธ์. Skillstore๋ ๊ทผ๊ฑฐ๋ฅผ ๋ณด๊ณ ํ์ง๋ง ์ด Skill์ ์์ ์ฌ๋ถ๋ฅผ ํ๋จํ์ง ์์ต๋๋ค.
๋ณด๊ณ ์ ๋งํฌ ๋ณต์ฌ
https://skillstore.io/skills/dhturing-healthcare-data-compliance-expert/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown ๋ฐฐ์ง
[](https://skillstore.io/skills/dhturing-healthcare-data-compliance-expert?utm_source=security_passport_badge)HTML ๋ฐฐ์ง
<a href="https://skillstore.io/skills/dhturing-healthcare-data-compliance-expert?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dhturing-healthcare-data-compliance-expert/security.svg" alt="Skillstore security assessment" loading="lazy"></a>์๋ฒ ๋ ์นด๋
<iframe src="https://skillstore.io/embed/skills/dhturing-healthcare-data-compliance-expert.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>ํ์ ์ธ์ฉ (APA ยท BibTeX ยท CFF)
APA ์ธ์ฉ
ๅพ็ตๆฐ็. (2026). healthcare-data-compliance-expert security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dhturing-healthcare-data-compliance-expert/audits/1BibTeX ์ธ์ฉ
@techreport{dhturing-healthcare-data-compliance-expert-2026,
author = {ๅพ็ตๆฐ็},
title = {healthcare-data-compliance-expert security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/dhturing-healthcare-data-compliance-expert/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "healthcare-data-compliance-expert security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "ๅพ็ตๆฐ็"
date-released: "2026-09-27"
url: "https://skillstore.io/skills/dhturing-healthcare-data-compliance-expert/audits/1"
identifiers:
- type: other
value: "skillstore:dhturing-healthcare-data-compliance-expert:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore ์ ์
์ด ์ ์์ ์ด์ ์ฆ๊ฑฐ ์ ๋ขฐ๋: ์ค๊ฐ๋ง๋ค ์ ์๋ ๊ฒ
Hospital Data Project Review
Assess planned analytics or assetization against consent, ownership, privacy, ethics, and approval requirements.
Medical AI Training Assessment
Compare anonymization and authorization paths for clinical or imaging data used in model training.
Genetic Research Screening
Identify human genetic resource controls for collection, collaboration, external provision, and cross-border transfer.
์ด ํ๋กฌํํธ๋ฅผ ์ฌ์ฉํด ๋ณด์ธ์
Classify these healthcare datasets by type and sensitivity: [datasets]. Explain which items are sensitive personal information and why.
Review this proposed use: [purpose]. Identify separate consent needs, required notices, withdrawal controls, and missing facts.
Compare anonymization, explicit authorization, and research pathways for [project]. Recommend a path with prerequisites, evidence, owners, and stop conditions.
Assess [project] across data sensitivity, consent, ethics, human genetic resources, ownership, sharing, and cross-border transfer. Provide gaps, remediation, and a conditional decision.
๋ชจ๋ฒ ์ฌ๋ก
- Provide the data inventory, processing purpose, recipients, locations, retention period, and current consent evidence.
- Separate anonymization from deidentification and document reidentification risk testing.
- Confirm current requirements with legal counsel, ethics bodies, and regulators before execution.
ํผํ๊ธฐ
- Do not assume deidentified data is anonymous or outside personal information rules.
- Do not reuse broad privacy notices as separate consent for unrelated sensitive data processing.
- Do not share genetic or medical data externally before completing approval and transfer screening.
์์ฃผ ๋ฌป๋ ์ง๋ฌธ
Does this skill provide legal advice?
Which jurisdiction does it cover?
Can it decide whether data is truly anonymous?
Does every healthcare project require separate consent?
Can it review human genetic resource issues?
What information produces the best assessment?
๊ฐ๋ฐ์ ์ธ๋ถ ์ ๋ณด
์์ฑ์
ๅพ็ตๆฐ็๋ผ์ด์ ์ค
MIT
Skillstore ๋ฆฌ๋น์
r1
๋ฒ์ ์๋ด
์์ฑ์๊ฐ ๋ฒ์ ์ ์ ์ธํ์ง ์์์ต๋๋ค.
๋ฆฌํฌ์งํ ๋ฆฌ
https://github.com/dhturing/turing-data-experts/tree/9c58ffa97ec5b760befef6f910eb23107cdcdbf4/skills/healthcare-data-compliance-expert์ฐธ์กฐ
50b73f83991cf073cbdf3f5afad2bbac71dd3bae
์ ์ง๋ณด์ ์ต์ ์ฑ
2026. 9. 30.
์ฌ์ฉ๋
0 ๋ค์ด๋ก๋ ยท 0 ์กฐํ
ํ์ผ ๊ตฌ์กฐ