I'm hoping to get some advice before building a website to help c the design.
I'm researching XHTML, PHP, and MySQL to make a website to collect subjective history for each patient visit. Haven't done it before so looking forward to a lot of coding mistakes. But before I start I want to get input on a safe way to design it for HIPAA.
I have trained my patients to fill out 2-3 pages of checklists about their current function and symptoms on a clipboard before I come into the exam room. I want to do that on cheap android tablets so I don't have to enter it, only review it. Patients could do it from anywhere before the appt if desired or on my tablets at the office.
I would like to expand it later by fleshing out symptoms with follow up checklists. If cough, is it dry, wet, color, SOB, chest pains, fevers, etc..
I'm thinking I could get around HIPAA by not having any identifiers associated with the database record. At my office, staff would note the autonumber generated by MySQL and I would take the tablet from the patient and enter that number to get the data. If the patient does this offsite they could choose their own "password" which they would have to tell me for me to get the data.
Is there a better way to make an amateur portal? Appreciate your help.