POST `/admin/compliance/hipaa/controls`

Create a HIPAA security control item record

Compliance Management - HIPAA `bearerAuth` application/json

Request Body

Schema: dto.CreateHIPAAControlRequest

Field	Type	Required	Example
`code`	`string`	Yes	`164.308(a)(1)`
`name`	`string`	Yes	`Security Management Process`
`category`	`string`	No	`Administrative Safeguards`
`description`	`string`	No	`Implement policies and procedures to prevent, detect, contain, and correct security violations`
`evidence_url`	`string`	No	`https://docs.example.com/hipaa/164.308.a.1`
`status`	`string`	No	`compliant`

Status	Description	Schema
201	created	`dto.HIPAAControlItemResponse`
400	bad request	`dto.ErrorResponse`

Field	Type	Required	Example	Constraints	Description
`code`	`integer`	No	`400`
`message`	`string`	No	`invalid request`

Field	Type	Required	Example
`category`	`string`	No	`Administrative Safeguards`
`control_id`	`string`	No	`164.308(a)(1)`
`control_name`	`string`	No	`Security Management Process`
`evidence_url`	`string`	No	`https://docs.example.com/...`
`id`	`string`	No	`01JQ...`
`last_reviewed`	`string`	No	`2026-04-01T00:00:00Z`
`status`	`string`	No	`compliant`

Field	Type	Required
`code`	`integer`	No
`data`	`dto.HIPAAControlItem`	No
`message`	`string`	No
`timestamp`	`string`	No