How would you design a system to handle patient data securely while ensuring compliance with healthcare regulations for ConcertAI?