Healthcare Data Governance Audit Framework
Audit healthcare data systems against HIPAA and governance standards
What You Can Do
You can conduct thorough healthcare data governance audits by submitting system documentation, access logs, and policy frameworks to Claude. The skill evaluates your systems against HIPAA Privacy and Security Rules, organizational governance policies, and data quality benchmarks—then produces detailed audit reports identifying compliance gaps, governance violations, and specific remediation actions ranked by risk level.
Features
Evaluates systems against Privacy Rule (PHI safeguards), Security Rule (technical/physical/administrative controls), and Breach Notification requirements
Assesses completeness, accuracy, consistency, and timeliness of health information records against organizational standards
Reviews user permissions, role-based access policies, and authentication mechanisms to identify unauthorized data exposure risks
Checks system configurations and processes against your documented data governance policies and procedures
Evaluates vendor compliance with data handling agreements, BAA requirements, and security controls
Generates prioritized action plans with specific steps, responsible parties, and timelines for addressing identified gaps
Produces comprehensive reports suitable for regulatory submissions, accreditation surveys, and legal discovery requests
Example Output
Example 1: Annual Compliance Audit Report
- Executive Summary: 12 findings identified across access controls, data quality, and policy compliance
- Critical Finding: Electronic Health Record access logs show 47 users with excessive privileges; recommend immediate role-based access control (RBAC) reconfiguration
- Medium Finding: Patient demographic data contains 3.2% missing ZIP codes impacting quality metrics; recommend data validation rules in admission workflow
- Remediation Timeline: Critical items due in 30 days, Medium items in 60 days
Example 2: Vendor Compliance Assessment
- Vendor: Cloud-based EHR backup service
- Compliant: Encryption in transit/at rest, Business Associate Agreement executed, annual security audits provided
- Non-Compliant: Access logs not retained for required 6-year period; recommend audit trail retention policy update
- Risk Rating: Medium — address within 90 days
Example 3: Data Quality Metrics Report
- Completeness: 94% of required fields populated (target: 98%); cardiac procedure notes missing severity documentation in 8% of cases
- Accuracy: 99.1% match rate between billing and clinical diagnoses (identifies revenue cycle risk)
- Timeliness: 89% of lab results documented within 24 hours; recommend process improvement for oncology labs
What's Included
- SKILL.md instruction file with healthcare data governance audit methodology:
- HIPAA Compliance Checklist: structured assessment template for Privacy Rule, Security Rule, and organizational requirements
- Data Quality Assessment Framework: metrics and benchmarks for evaluating completeness, accuracy, consistency, and timeliness
- Audit Report Template: executive summary, detailed findings, risk ratings, and remediation action plan format
- Vendor Compliance Assessment Workbook: specific evaluation criteria for third-party data handlers and BAA requirements
Who It's For
- Health Information Managers — responsible for data governance, HIPAA compliance, and audit documentation
- Compliance Officers — ensuring organizational adherence to healthcare privacy and security regulations
- Privacy Officers/DPOs — managing PHI protection, breach response, and regulatory submissions
- Healthcare IT Audit Specialists — evaluating EHR systems, databases, and access controls for compliance
- Risk Management Directors — identifying governance gaps and prioritizing remediation investments
Best For
- Annual HIPAA compliance audits of health information systems
- Investigating data governance violations or suspected privacy breaches
- Preparing for accreditation surveys, regulatory inspections, or legal discovery
- Onboarding new systems or databases into healthcare information ecosystems
- Evaluating third-party vendor compliance with data handling agreements
- Assessing data quality metrics and creating improvement plans
You might also like
You can process diverse patient feedback—surveys, interviews, focus groups, complaints—and transform it into cohesive advisory insights that drive decision-making. The skill quantifies sentiment patterns, identifies priority themes with supporting evidence, and frames recommendations within organizational strategy and resource constraints. This prevents both feedback overwhelm and anecdotal decision-making, helping you present 3-5 compelling board-level recommendations backed by systematic analysis rather than isolated complaints.
by tdhopper
Analyze EHR audit findings to identify data quality issues across completeness, accuracy, consistency, and timeliness dimensions. You'll receive structured reports that prioritize patient safety risks and regulatory exposure, enabling you to allocate remediation resources strategically and prepare comprehensive correction plans for compliance reviews.
by tdhopper
You can comprehensively analyze municipal capital projects across all lifecycle phases to uncover budget vulnerabilities, procurement compliance issues, and governance gaps before they escalate into crises. This skill helps you assess funding source risks, stakeholder alignment, construction variable impacts, and closeout readiness—enabling you to present council-ready risk assessments and recommend mitigation strategies that protect voter-approved budgets and community trust.
by tdhopper
You can validate CPT code assignments against source documentation to catch discrepancies, flag potential upcoding or downcoding, and verify compliance with bundling rules and medical necessity criteria. This skill identifies common coding errors, confirms modifier usage aligns with payer requirements, and provides evidence-based justification for code choices—reducing claim denials, audit risk, and revenue leakage.
by tdhopper
You can design complete data governance frameworks that establish clear ownership, access controls, data quality standards, and breach protocols across EHR systems, data warehouses, and integration platforms. The skill maps regulatory requirements to organizational policies, defines data stewardship roles with accountability matrices, and creates audit procedures and metrics for ongoing compliance monitoring—all in formats ready for board presentation or regulatory review.
by github
You can develop comprehensive quality improvement initiatives that address patient safety, operational efficiency, and clinical outcomes in hospital settings. This skill guides you through structured improvement cycles (PDSA, Six Sigma), helps you translate organizational goals into measurable projects, and enables you to navigate regulatory compliance requirements while managing multi-disciplinary clinical teams through change implementation.
by tdhopper
You can reconcile federal grant budgets line-by-line against Notice of Award amounts and actual spending, automatically flag variances exceeding compliance thresholds (typically ±10%), and generate detailed variance explanations tied to cost accounting standards. The skill produces audit-ready documentation including cost allocation justifications, indirect cost rate compliance verification, and time-and-effort certification alignment—helping you avoid funding clawbacks and audit findings during Single Audit, CMS Conditions of Participation reviews, or federal agency inquiries.
by tdhopper