You consider executing one of the following cybersecurity best practices:
End-to-end AES 256 encryption
User session time-out
Role-based access rights
Multi-factor authentication
Add IEC 62304, ISO27001, SOC2 Type 2
Follow  HIPAA, the HITECH Act, and GDPR