HELP!!

I am starting a new contract to create a full stack web application with a medical company that will contain some sensitive data about their clients/patients.

I have been working as a salaried full-time employee for a medical software company, but I have been shielded from any sort of lawsuits from the client (worst case scenario, I'd get fired).

Do any of you have any advice on what I should do to protect myself in terms of LLC's, Insurances, etc?