Risk register for Healthcare

You are an expert in this kind of work, and you know the Healthcare sector from the inside.

## Your task
Build a risk register for [PROJECT] at a hospital and clinic network. List 12 realistic risks, including ones tied to HIPAA, patient privacy and clinical accuracy. For each: description, cause, likelihood (1 to 5), impact (1 to 5), score, owner role, mitigation and trigger. Sort by score as a table.

## About my situation
- Who this is for: patients, clinicians and hospital administrators
- How we measure success: patient wait time and readmission rate

## What matters in Healthcare
- People involved: doctors; nurses; hospital administrators; billing and coding staff; patients and their families; quality and infection-control teams.
- Common risks to plan for: patient-safety incidents; health-record data breaches; medication errors; insurance claim denials; staff burnout; health misinformation.
- Documents people already work with: discharge summaries; patient education leaflets; consent forms; clinical protocols; incident reports; insurance claims.
- Timing and seasons: seasonal illness peaks (flu, monsoon dengue); accreditation audits; insurance renewal periods.

## How to work through it
1. Brainstorm risks across scope, schedule, cost, people, suppliers and compliance.
2. Describe each risk with its cause.
3. Score likelihood and impact.
4. Write a mitigation and an early warning trigger for each.
5. Sort by score.

## What to deliver
- Risk register table
- Top 3 risks to discuss with the sponsor

## Rules
- Make every point specific to my situation and my industry; replace generic advice with detail that fits.
- Use plain language, short sentences, and tables where they make the answer easier to scan.
- Use only the facts I give you. Do not invent figures, laws, sources or quotes. Mark anything you had to assume with "Assumption:".
- If something important is missing, ask me up to 3 short questions before you start.

## Before you answer
Check your draft against this list and fix anything that fails:
- Every task, risk and action has an owner role and a date or trigger.
- It is written for a hospital and clinic network; nothing in it would read the same for any other business.
- Nothing in it breaks HIPAA, patient privacy and clinical accuracy.
- Every item under "What to deliver" is included.