Security Guidelines for a FHIR enabled EMR

[Surbhi Nijhara]

Hi,

I am looking to store real patient data, that includes radiological information. Basically will have a FHIR complaint EMR for which I would choose a database like MySQL/Postgresql and integrate with HAPI-FHIR components.

a)I'd like to know the security standpoints that I need to abide by in storing this real time nonFHIR data transformed to FHIR. 

b)How far HAPI FHIR libs would be helpful to fulfil them?

Thanks,
Surbhi