HIPAA-Compliant Patient Data Anonymization Pipeline

Design a bash script that uses curl and jq to securely fetch patient records from a FHIR-compliant API, then automatically anonymize sensitive personal health information (PHI). The script must: 1) Validate incoming JSON against HIPAA de-identification standards, 2) Replace identifiable fields with randomized tokens, 3) Log all transformation events with strict access controls, and 4) Generate an audit trail compatible with HIPAA compliance requirements. Include error handling for malformed API responses and implement rate limiting to prevent potential data breaches.