HIPAA Compliance Documentation Auditor
Audit healthcare documentation for HIPAA violations and generate compliance reports
What You Can Do
You can conduct comprehensive HIPAA compliance audits of healthcare documentation, workflows, and systems to identify Protected Health Information (PHI) exposure risks. Claude analyzes your documents against HIPAA Standards, classifies violations by severity level, and produces evidence-based compliance reports with specific violation citations and prioritized corrective action plans. This creates defensible audit trails and demonstrates organizational commitment to HIPAA regulations and Business Associate Agreements.
Features
automatically detect Protected Health Information in documentation and flag at-risk storage or access patterns
categorize findings by severity (Critical, High, Medium, Low) with specific HIPAA rule citations (Privacy Rule, Security Rule, Breach Notification Rule)
rank violations by likelihood and impact to generate prioritized remediation roadmaps
review third-party compliance documentation against BAA requirements and HIPAA standards
create specific, measurable, time-bound remediation steps with responsibility assignments
produce detailed evidence records suitable for OCR inquiries, breach investigations, or compliance recertifications
evaluate authorization matrices and access logs for inappropriate PHI access patterns
distill complex audit findings into board-level compliance reports with key metrics and recommendations
Example Output
Audit Finding Example:
Violation: Unencrypted patient scheduling database accessible to non-clinical staff
- HIPAA Rule Cited: 45 CFR § 164.312(a)(2)(i) – Encryption and decryption of ePHI
- Severity: Critical
- Risk Impact: High (20+ staff members with unnecessary PHI access)
- Remediation Step: Implement AES-256 encryption on patient database; restrict access via role-based access control within 30 days
- Owner: IT Director
- Compliance Evidence: Encryption audit logs, updated access matrix
Executive Summary Section:
- Total Findings: 12
- Critical: 2 | High: 4 | Medium: 5 | Low: 1
- Estimated Remediation Timeline: 60 days
- Priority Actions: Database encryption, workforce training, Business Associate audit
What's Included
- SKILL.md instruction file with audit frameworks and HIPAA rule reference mappings:
- HIPAA Violation Classification Checklist (Privacy, Security, Breach Notification Rules):
- PHI Exposure Risk Assessment Matrix and scoring methodology:
- Audit Report Template with sections for findings, citations, severity rankings, and CAPs:
- Business Associate Compliance Review Template:
- Workforce Access Control Analysis Worksheet:
- Executive Summary format for leadership and board reporting:
Who It's For
- HIPAA Compliance Officers conducting routine or triggered audits
- Healthcare Privacy Officers preparing for OCR inquiries or breach investigations
- Compliance Managers evaluating Business Associate documentation and BAA compliance
- Internal audit teams documenting risk analysis gaps and remediation progress
- Healthcare IT leaders conducting security and access control assessments
Best For
- Systematic documentation and process audits for HIPAA violation identification
- Breach incident investigations requiring audit trail and evidence documentation
- Corrective action plan development with specific remediation timelines and ownership
- Business Associate compliance reviews and BAA validation
- Workforce access control analysis and PHI exposure mapping
- Compliance recertification and OCR inquiry preparation with defensible audit records
You might also like
You can systematically assess any sales opportunity across four critical dimensions—fit, budget, timeline, and authority—to determine deal viability and prioritize your pipeline. The skill generates a composite health score (0-100), surfaces risk flags, identifies gaps, and produces a prioritized action plan so you can focus on high-probability opportunities and know exactly what to do next.
by github
You can rapidly evaluate pre-authorization requests by extracting clinical information from provider submissions, mapping findings against medical necessity standards, identifying documentation gaps, and generating clear authorization decisions with detailed rationale. This creates an audit trail that withstands peer review and appeals while supporting provider education through transparent decision logic.
by github
You can transform scattered financial data, program metrics, and budget spreadsheets into comprehensive, compliance-ready grant reports tailored to specific funder requirements. Claude reconciles budgeted versus actual spending, extracts outcomes data, flags variances, and generates audit-trail documentation—reducing manual synthesis work from days to hours while ensuring accuracy and funder alignment.
by github
You can process large volumes of patient feedback—surveys, reviews, complaints, and compliments—to identify recurring themes and emotional patterns that drive satisfaction. Claude reveals which service touchpoints matter most to your patient population, highlights systemic gaps, and generates prioritized improvement initiatives with clear implementation pathways. This transforms reactive complaint handling into proactive satisfaction architecture grounded in data.
by github
You can rapidly assess the healthcare economic implications of trade agreements by analyzing tariff classifications on pharmaceuticals and medical devices, evaluating intellectual property provisions affecting drug market entry, reviewing GATS commitments on healthcare service trade, and identifying competitive advantages or disadvantages across your portfolio countries. This skill helps you quantify market access gains and pricing pressures while flagging regulatory harmonization commitments that affect healthcare delivery.
by github
You can conduct comprehensive HIPAA compliance audits across your healthcare operations by analyzing workflows, documentation patterns, access logs, and Business Associate Agreements against the 18 primary violation categories. Claude identifies compliance gaps, quantifies risk exposure, and generates evidence-based corrective action plans tailored to your specific departmental or organizational context.
by github
You can systematically decode state-specific grant requirements across Medicaid, workforce development, rural health, and behavioral health programs. The skill helps you identify compliance gaps in your current processes, build state-compliant budget narratives and work plans, and create audit-ready documentation frameworks tailored to your state's unique administrative standards and reporting frequencies.
by github
You can systematize the entire primary source verification lifecycle—from initial data collection through final documentation—for healthcare providers. This skill manages verification requests across multiple credential categories (licenses, education, DEA, employment history), tracks source coordination timelines, resolves discrepancies between sources, and produces compliance-ready verification reports that satisfy Joint Commission, CMS, and plan network audits.
by github