# Healthcare Profile Examples ## Clinical Research Assistant[​](#clinical-research-assistant "Direct link to Clinical Research Assistant") A clinical research agent that assists with patient record analysis and clinical trial matching, with full HIPAA compliance and PHI handling controls. * YAML * JSON clinical-research-agent.adl.yaml ``` $schema: https://adl-spec.org/0.3/schema.json adl_spec: 0.3.0 name: Clinical Research Assistant description: Assists researchers with patient record analysis and clinical trial matching. version: 1.0.0 profiles: - urn:adl:profile:healthcare:1.0 lifecycle: status: active effective_date: 2026-01-15T00:00:00Z provider: name: HealthTech Corp url: https://healthtech.example contact: compliance@healthtech.example model: capabilities: - function_calling tools: - name: search_patient_records description: Search de-identified patient records for clinical trial matching parameters: type: object properties: criteria: type: string limit: type: integer default: 20 required: - criteria read_only: true - name: generate_cohort_report description: Generate a cohort analysis report from matched records parameters: type: object properties: cohort_id: type: string format: type: string enum: - pdf - json required: - cohort_id permissions: network: allowed_hosts: - ehr.healthtech.example - fhir.healthtech.example allowed_protocols: - https deny_private: true filesystem: allowed_paths: - path: /data/deidentified/** access: read - path: /data/reports/** access: read_write security: authentication: type: oauth2 required: true scopes: - patient:read - report:write encryption: in_transit: required: true min_version: "1.2" at_rest: required: true algorithm: AES-256-GCM data_classification: sensitivity: restricted categories: - pii - phi retention: min_days: 2190 handling: encryption_required: true logging_required: true healthcare: phi_types: - demographics - medical_records hipaa_applicability: true hipaa_compliance: covered_entity_type: business_associate baa_required: true minimum_necessary: scope: task_specific justification: Access limited to de-identified records for clinical trial matching review_frequency: quarterly security_rule: encryption_at_rest: AES_256 encryption_in_transit: TLS_1_2 mfa_required: true data_retention: none restoration_hours: 72 phi_handling: de_identification: method: safe_harbor re_identification_controls: true breach_notification: notification_hours: 60 contact: privacy-officer@healthtech.example threshold: 500 consent_management: required: true consent_types: - research granularity: purpose_specific revocation_supported: true clinical_safety: bias_monitoring: enabled: true protected_classes: - race - ethnicity - sex - age assessment_frequency: quarterly last_assessment: 2026-01-01T00:00:00Z human_in_the_loop: level: approval_required role: Principal Investigator escalation_path: IRB Committee interoperability: fhir_version: R4 terminology_bindings: - ICD-10 - SNOMED-CT - LOINC information_blocking: compliant: true metadata: authors: - name: HealthTech Compliance Team email: compliance@healthtech.example license: Proprietary tags: - healthcare - hipaa - clinical-research - fhir ``` clinical-research-agent.adl.json ``` { "$schema": "https://adl-spec.org/0.3/schema.json", "adl_spec": "0.3.0", "name": "Clinical Research Assistant", "description": "Assists researchers with patient record analysis and clinical trial matching.", "version": "1.0.0", "profiles": [ "urn:adl:profile:healthcare:1.0" ], "lifecycle": { "status": "active", "effective_date": "2026-01-15T00:00:00Z" }, "provider": { "name": "HealthTech Corp", "url": "https://healthtech.example", "contact": "compliance@healthtech.example" }, "model": { "capabilities": [ "function_calling" ] }, "tools": [ { "name": "search_patient_records", "description": "Search de-identified patient records for clinical trial matching", "parameters": { "type": "object", "properties": { "criteria": { "type": "string" }, "limit": { "type": "integer", "default": 20 } }, "required": [ "criteria" ] }, "read_only": true }, { "name": "generate_cohort_report", "description": "Generate a cohort analysis report from matched records", "parameters": { "type": "object", "properties": { "cohort_id": { "type": "string" }, "format": { "type": "string", "enum": [ "pdf", "json" ] } }, "required": [ "cohort_id" ] } } ], "permissions": { "network": { "allowed_hosts": [ "ehr.healthtech.example", "fhir.healthtech.example" ], "allowed_protocols": [ "https" ], "deny_private": true }, "filesystem": { "allowed_paths": [ { "path": "/data/deidentified/**", "access": "read" }, { "path": "/data/reports/**", "access": "read_write" } ] } }, "security": { "authentication": { "type": "oauth2", "required": true, "scopes": [ "patient:read", "report:write" ] }, "encryption": { "in_transit": { "required": true, "min_version": "1.2" }, "at_rest": { "required": true, "algorithm": "AES-256-GCM" } } }, "data_classification": { "sensitivity": "restricted", "categories": [ "pii", "phi" ], "retention": { "min_days": 2190 }, "handling": { "encryption_required": true, "logging_required": true }, "healthcare": { "phi_types": [ "demographics", "medical_records" ], "hipaa_applicability": true } }, "hipaa_compliance": { "covered_entity_type": "business_associate", "baa_required": true, "minimum_necessary": { "scope": "task_specific", "justification": "Access limited to de-identified records for clinical trial matching", "review_frequency": "quarterly" }, "security_rule": { "encryption_at_rest": "AES_256", "encryption_in_transit": "TLS_1_2", "mfa_required": true, "data_retention": "none", "restoration_hours": 72 } }, "phi_handling": { "de_identification": { "method": "safe_harbor", "re_identification_controls": true }, "breach_notification": { "notification_hours": 60, "contact": "privacy-officer@healthtech.example", "threshold": 500 }, "consent_management": { "required": true, "consent_types": [ "research" ], "granularity": "purpose_specific", "revocation_supported": true } }, "clinical_safety": { "bias_monitoring": { "enabled": true, "protected_classes": [ "race", "ethnicity", "sex", "age" ], "assessment_frequency": "quarterly", "last_assessment": "2026-01-01T00:00:00Z" }, "human_in_the_loop": { "level": "approval_required", "role": "Principal Investigator", "escalation_path": "IRB Committee" } }, "interoperability": { "fhir_version": "R4", "terminology_bindings": [ "ICD-10", "SNOMED-CT", "LOINC" ], "information_blocking": { "compliant": true } }, "metadata": { "authors": [ { "name": "HealthTech Compliance Team", "email": "compliance@healthtech.example" } ], "license": "Proprietary", "tags": [ "healthcare", "hipaa", "clinical-research", "fhir" ] } } ``` ### Key Healthcare Fields[​](#key-healthcare-fields "Direct link to Key Healthcare Fields") | Field | Purpose | | -------------------------------- | ------------------------------------------------------------------------ | | `hipaa_compliance` | Covered entity type, BAA requirements, minimum necessary scope | | `phi_handling` | De-identification method, breach notification, consent management | | `clinical_safety` | Bias monitoring across protected classes, human-in-the-loop requirements | | `interoperability` | FHIR version, terminology bindings (ICD-10, SNOMED-CT, LOINC) | | `data_classification.healthcare` | PHI types and HIPAA applicability flag | ### Compliance Highlights[​](#compliance-highlights "Direct link to Compliance Highlights") * **HIPAA Security Rule**: AES-256 at rest, TLS 1.2+ in transit, MFA required * **De-identification**: Safe Harbor method with re-identification controls * **Breach Notification**: 60-hour notification window, 500-record threshold * **Consent**: Purpose-specific, revocation supported * **Bias Monitoring**: Quarterly assessment across race, ethnicity, sex, and age ## Composed with the Governance Profile[​](#composed-with-the-governance-profile "Direct link to Composed with the Governance Profile") The Healthcare Profile is designed to compose with the [Governance Profile](/profiles/governance/overview.md). This composite example declares both `urn:adl:profile:governance:1.0` and `urn:adl:profile:healthcare:1.0`, adding the governance-required `autonomy` and `compliance_framework` members on top of the healthcare members above. * YAML * JSON composite/governance-healthcare-agent.adl.yaml ``` $schema: https://adl-spec.org/0.3/schema.json adl_spec: 0.3.0 name: Clinical Research Assistant description: Assists researchers with patient record analysis and clinical trial matching. version: 1.0.0 profiles: - urn:adl:profile:governance:1.0 - urn:adl:profile:healthcare:1.0 lifecycle: status: active effective_date: 2026-01-15T00:00:00Z provider: name: HealthTech Corp url: https://healthtech.example contact: compliance@healthtech.example model: capabilities: - function_calling tools: - name: search_patient_records description: Search de-identified patient records for clinical trial matching parameters: type: object properties: criteria: type: string limit: type: integer default: 20 required: - criteria read_only: true - name: generate_cohort_report description: Generate a cohort analysis report from matched records parameters: type: object properties: cohort_id: type: string format: type: string enum: - pdf - json required: - cohort_id permissions: network: allowed_hosts: - ehr.healthtech.example - fhir.healthtech.example allowed_protocols: - https deny_private: true filesystem: allowed_paths: - path: /data/deidentified/** access: read - path: /data/reports/** access: read_write security: authentication: type: oauth2 required: true scopes: - patient:read - report:write encryption: in_transit: required: true min_version: "1.2" at_rest: required: true algorithm: AES-256-GCM data_classification: sensitivity: restricted categories: - pii - phi retention: min_days: 2190 handling: encryption_required: true logging_required: true healthcare: phi_types: - demographics - medical_records hipaa_applicability: true hipaa_compliance: covered_entity_type: business_associate baa_required: true minimum_necessary: scope: task_specific justification: Access limited to de-identified records for clinical trial matching review_frequency: quarterly security_rule: encryption_at_rest: AES_256 encryption_in_transit: TLS_1_2 mfa_required: true data_retention: none restoration_hours: 72 phi_handling: de_identification: method: safe_harbor re_identification_controls: true breach_notification: notification_hours: 60 contact: privacy-officer@healthtech.example threshold: 500 consent_management: required: true consent_types: - research granularity: purpose_specific revocation_supported: true clinical_safety: bias_monitoring: enabled: true protected_classes: - race - ethnicity - sex - age assessment_frequency: quarterly last_assessment: 2026-01-01T00:00:00Z human_in_the_loop: level: approval_required role: Principal Investigator escalation_path: IRB Committee interoperability: fhir_version: R4 terminology_bindings: - ICD-10 - SNOMED-CT - LOINC information_blocking: compliant: true autonomy: tier: 1 basis: Supervised clinical research support; cohort outputs reviewed by the Principal Investigator. classified_by: HealthTech Compliance Team classified_at: 2026-01-15T00:00:00Z compliance_framework: primary_framework: HIPAA control_mappings: - framework: HIPAA control_id: §164.312(a)(1) status: implemented - framework: HIPAA control_id: §164.312(e)(1) status: implemented - framework: NIST control_id: AC-6 status: implemented metadata: authors: - name: HealthTech Compliance Team email: compliance@healthtech.example license: Proprietary tags: - healthcare - hipaa - clinical-research - fhir ``` composite/governance-healthcare-agent.adl.json ``` { "$schema": "https://adl-spec.org/0.3/schema.json", "adl_spec": "0.3.0", "name": "Clinical Research Assistant", "description": "Assists researchers with patient record analysis and clinical trial matching.", "version": "1.0.0", "profiles": [ "urn:adl:profile:governance:1.0", "urn:adl:profile:healthcare:1.0" ], "lifecycle": { "status": "active", "effective_date": "2026-01-15T00:00:00Z" }, "provider": { "name": "HealthTech Corp", "url": "https://healthtech.example", "contact": "compliance@healthtech.example" }, "model": { "capabilities": [ "function_calling" ] }, "tools": [ { "name": "search_patient_records", "description": "Search de-identified patient records for clinical trial matching", "parameters": { "type": "object", "properties": { "criteria": { "type": "string" }, "limit": { "type": "integer", "default": 20 } }, "required": [ "criteria" ] }, "read_only": true }, { "name": "generate_cohort_report", "description": "Generate a cohort analysis report from matched records", "parameters": { "type": "object", "properties": { "cohort_id": { "type": "string" }, "format": { "type": "string", "enum": [ "pdf", "json" ] } }, "required": [ "cohort_id" ] } } ], "permissions": { "network": { "allowed_hosts": [ "ehr.healthtech.example", "fhir.healthtech.example" ], "allowed_protocols": [ "https" ], "deny_private": true }, "filesystem": { "allowed_paths": [ { "path": "/data/deidentified/**", "access": "read" }, { "path": "/data/reports/**", "access": "read_write" } ] } }, "security": { "authentication": { "type": "oauth2", "required": true, "scopes": [ "patient:read", "report:write" ] }, "encryption": { "in_transit": { "required": true, "min_version": "1.2" }, "at_rest": { "required": true, "algorithm": "AES-256-GCM" } } }, "data_classification": { "sensitivity": "restricted", "categories": [ "pii", "phi" ], "retention": { "min_days": 2190 }, "handling": { "encryption_required": true, "logging_required": true }, "healthcare": { "phi_types": [ "demographics", "medical_records" ], "hipaa_applicability": true } }, "hipaa_compliance": { "covered_entity_type": "business_associate", "baa_required": true, "minimum_necessary": { "scope": "task_specific", "justification": "Access limited to de-identified records for clinical trial matching", "review_frequency": "quarterly" }, "security_rule": { "encryption_at_rest": "AES_256", "encryption_in_transit": "TLS_1_2", "mfa_required": true, "data_retention": "none", "restoration_hours": 72 } }, "phi_handling": { "de_identification": { "method": "safe_harbor", "re_identification_controls": true }, "breach_notification": { "notification_hours": 60, "contact": "privacy-officer@healthtech.example", "threshold": 500 }, "consent_management": { "required": true, "consent_types": [ "research" ], "granularity": "purpose_specific", "revocation_supported": true } }, "clinical_safety": { "bias_monitoring": { "enabled": true, "protected_classes": [ "race", "ethnicity", "sex", "age" ], "assessment_frequency": "quarterly", "last_assessment": "2026-01-01T00:00:00Z" }, "human_in_the_loop": { "level": "approval_required", "role": "Principal Investigator", "escalation_path": "IRB Committee" } }, "interoperability": { "fhir_version": "R4", "terminology_bindings": [ "ICD-10", "SNOMED-CT", "LOINC" ], "information_blocking": { "compliant": true } }, "autonomy": { "tier": 1, "basis": "Supervised clinical research support; cohort outputs reviewed by the Principal Investigator.", "classified_by": "HealthTech Compliance Team", "classified_at": "2026-01-15T00:00:00Z" }, "compliance_framework": { "primary_framework": "HIPAA", "control_mappings": [ { "framework": "HIPAA", "control_id": "§164.312(a)(1)", "status": "implemented" }, { "framework": "HIPAA", "control_id": "§164.312(e)(1)", "status": "implemented" }, { "framework": "NIST", "control_id": "AC-6", "status": "implemented" } ] }, "metadata": { "authors": [ { "name": "HealthTech Compliance Team", "email": "compliance@healthtech.example" } ], "license": "Proprietary", "tags": [ "healthcare", "hipaa", "clinical-research", "fhir" ] } } ```