{
  "id": "responsibility:hipaa-compliance",
  "_kind": "Responsibility",
  "_file": "role/responsibilities/responsibilities-expanded-2.yaml",
  "_cluster": "role",
  "attributes": {
    "displayName": "HIPAA compliance",
    "cadence": "continuous",
    "description": "Ensure HIPAA compliance for protected health information — access\ncontrols, audit logging, encryption, BAA management, and breach\nnotification procedures.\n"
  },
  "outgoingEdges": [
    {
      "from": "responsibility:hipaa-compliance",
      "to": "role:compliance-officer",
      "kind": "held_by",
      "attributes": {}
    },
    {
      "from": "responsibility:hipaa-compliance",
      "to": "role:security-engineer",
      "kind": "held_by",
      "attributes": {}
    },
    {
      "from": "responsibility:hipaa-compliance",
      "to": "role:privacy-engineer",
      "kind": "held_by",
      "attributes": {}
    },
    {
      "from": "responsibility:hipaa-compliance",
      "to": "skill-area:compliance-automation",
      "kind": "requires_expertise",
      "attributes": {}
    },
    {
      "from": "responsibility:hipaa-compliance",
      "to": "skill-area:data-governance",
      "kind": "requires_expertise",
      "attributes": {}
    }
  ],
  "incomingEdges": []
}