Use dynamic data masking to mask patient data for all users except administrators.

Implement Azure role-based access control (RBAC) to restrict access to the database.

Use row-level security policies to filter rows based on the healthcare provider's identity.

Encrypt the patient data columns and manage decryption keys through Azure Key Vault.