Assume I am creating an application that generates a report of health recommendations based on input patient diagnostics.
My application receives no identifying information about the patient. It receives only a unique patient identifier (e.g. "Patient #123456") and the patient's diagnostics (e.g "Heart rate 80 BPM").
The report output by my application contains only that unique identifier, diagnostics, and health recommendations (e.g. "Patient #123456 had a sodium level of a billion mEq/L. We recommend the patient eat less salt.")
I want to avoid generating these reports as PDFs because PDFs are difficult to develop. I'd much rather generate print-friendly HTML/CSS webpages, which my users can then print/export to PDF if they would like. (Assume all my users are all on modern desktop web browsers -- no IE8 outliers.)
What would be the regulatory concerns (if any) of delivering reports as static webpages, rather than PDFs? Can I mitigate these somehow?