Healthcare and Life Sciences
Clinical, claims and operational records have to be joined together, and every access rule attached to any one of them still applies to the joined result.
What makes it hard
- Patient identity resolved across systems that hold no identifier in common
- Clinical events arriving continuously while claims arrive weeks after the encounter
- De-identified extracts that can be re-identified once they are joined to something else
- Retention periods longer than the service life of the systems holding the data
What it means for the design
HIPAA obligations shape the access model from the first design session. Row-level security policies and masking on identifier columns are built early, because adding them to a populated warehouse later means reloading tables and re-running every downstream test.