Comment by jadbox

I feel seen. It's compounded if you also need to add HIPAA row-level security compliance that spans to every form of resource.