All healthcare software that operates on the territory of the US has to be HIPAA compliant. That’s why you need to use approaches that provide the highest level of security:
Multi-factor authentication
Biometrics
Expiring passwords
Risk-based authentication
Physical means of identification