88 lines
3.8 KiB
QBasic
88 lines
3.8 KiB
QBasic
' =============================================================================
|
||
' HIPAA Medical Privacy Portal - Main Dialog
|
||
' General Bots Template for Healthcare Data Protection
|
||
' =============================================================================
|
||
' This template helps healthcare organizations comply with:
|
||
' - HIPAA (Health Insurance Portability and Accountability Act)
|
||
' - HITECH Act (Health Information Technology for Economic and Clinical Health)
|
||
' - State-specific healthcare privacy regulations
|
||
' =============================================================================
|
||
|
||
TALK "🏥 Welcome to the HIPAA Privacy Portal"
|
||
TALK "I can help you manage your Protected Health Information (PHI) rights."
|
||
TALK ""
|
||
|
||
TALK "Under HIPAA, you have the following rights:"
|
||
TALK ""
|
||
TALK "1️⃣ **Access Your Medical Records** - Request copies of your health information"
|
||
TALK "2️⃣ **Request Amendments** - Correct errors in your medical records"
|
||
TALK "3️⃣ **Accounting of Disclosures** - See who has accessed your PHI"
|
||
TALK "4️⃣ **Request Restrictions** - Limit how we use or share your information"
|
||
TALK "5️⃣ **Confidential Communications** - Choose how we contact you"
|
||
TALK "6️⃣ **File a Privacy Complaint** - Report a privacy concern"
|
||
TALK "7️⃣ **Revoke Authorization** - Withdraw previous consent for PHI disclosure"
|
||
|
||
HEAR choice AS "What would you like to do? (1-7 or describe your request)"
|
||
|
||
SELECT CASE choice
|
||
CASE "1", "access", "records", "medical records", "view", "copy"
|
||
CALL "access-phi.bas"
|
||
|
||
CASE "2", "amend", "amendment", "correct", "correction", "fix", "error"
|
||
CALL "request-amendment.bas"
|
||
|
||
CASE "3", "accounting", "disclosures", "who accessed", "access log"
|
||
CALL "accounting-disclosures.bas"
|
||
|
||
CASE "4", "restrict", "restriction", "limit", "limitations"
|
||
CALL "request-restrictions.bas"
|
||
|
||
CASE "5", "communications", "contact", "how to contact", "confidential"
|
||
CALL "confidential-communications.bas"
|
||
|
||
CASE "6", "complaint", "report", "privacy concern", "violation"
|
||
CALL "file-complaint.bas"
|
||
|
||
CASE "7", "revoke", "withdraw", "cancel authorization"
|
||
CALL "revoke-authorization.bas"
|
||
|
||
CASE ELSE
|
||
' Use LLM to understand medical privacy requests
|
||
SET CONTEXT "You are a HIPAA compliance assistant. Classify the user's request into one of these categories: access_records, amendment, disclosures, restrictions, communications, complaint, revoke. Only respond with the category name."
|
||
|
||
intent = LLM "Classify this healthcare privacy request: " + choice
|
||
|
||
SELECT CASE intent
|
||
CASE "access_records"
|
||
CALL "access-phi.bas"
|
||
CASE "amendment"
|
||
CALL "request-amendment.bas"
|
||
CASE "disclosures"
|
||
CALL "accounting-disclosures.bas"
|
||
CASE "restrictions"
|
||
CALL "request-restrictions.bas"
|
||
CASE "communications"
|
||
CALL "confidential-communications.bas"
|
||
CASE "complaint"
|
||
CALL "file-complaint.bas"
|
||
CASE "revoke"
|
||
CALL "revoke-authorization.bas"
|
||
CASE ELSE
|
||
TALK "I'm not sure I understood your request."
|
||
TALK "Please select a number from 1-7 or contact our Privacy Officer directly."
|
||
TALK ""
|
||
TALK "📞 Privacy Officer: privacy@healthcare.org"
|
||
TALK "📧 Email: hipaa-requests@healthcare.org"
|
||
CALL "start.bas"
|
||
END SELECT
|
||
END SELECT
|
||
|
||
' Log all interactions for HIPAA audit trail
|
||
INSERT INTO "hipaa_audit_log" VALUES {
|
||
"timestamp": NOW(),
|
||
"session_id": GET SESSION "id",
|
||
"action": "privacy_portal_access",
|
||
"choice": choice,
|
||
"ip_address": GET SESSION "client_ip",
|
||
"user_agent": GET SESSION "user_agent"
|
||
}
|