Healthcare Research Data Governance Framework Builder
Build HIPAA-compliant data governance frameworks for healthcare research
What You Can Do
You'll develop comprehensive data governance policies, compliance procedures, and audit frameworks specifically tailored to healthcare research programs. This skill ensures your organization meets HIPAA requirements while establishing clear protocols for handling sensitive research data. You'll create standardized governance documentation, risk assessments, and monitoring procedures that protect participant privacy and enable regulatory compliance.
Features
Develops policies aligned with HIPAA Privacy and Security Rules, including required safeguards for ePHI (electronic Protected Health Information) and Breach Notification requirements
Creates multi-tier data classification frameworks that categorize research data by sensitivity, with storage, encryption, access control, and retention specifications for each tier
Generates risk matrices, threat assessment methodologies, and documented mitigation strategies to identify and evaluate data security vulnerabilities specific to research environments
Develops role-based access control (RBAC) systems with detailed authorization matrices, privilege management procedures, and ePHI access restrictions for different research roles
Establishes comprehensive audit trail requirements, logging standards, monitoring schedules, and compliance verification procedures for continuous governance oversight
Creates incident response workflows, notification templates, remediation procedures, and documentation requirements for detecting and managing data breaches
Develops HIPAA awareness training materials, role-specific competency requirements, and assessment tools to ensure research team compliance with policies
Provides standardized forms, checklists, policy templates, and procedure documents for consistent governance implementation across your research organization
Example Output
Data Classification Policy
Tier 1 (Public): De-identified published results, no PHI, standard cloud storage, open access
Tier 2 (Internal): De-identified research data, encrypted internal servers, research team access
Tier 3 (Sensitive): Contains identifiable information, HIPAA-compliant encrypted storage, authorized researchers only
Tier 4 (Restricted): Genetic/biometric data, air-gapped systems, principal investigator approval required
Risk Assessment Matrix
| Data Type | Threat | Likelihood | Impact | Risk Score | Mitigation |
|---|---|---|---|---|---|
| Patient SSN | Unauthorized access | High | Critical | 9 | Encryption at rest/transit, RBAC, monitoring |
| Lab results | Data loss | Medium | High | 6 | Automated backups, version control, redundancy |
| Research notes | Accidental disclosure | Medium | Medium | 4 | Data minimization, access logging, training |
Access Control Matrix
Principal Investigator: View all data, edit protocols and retention rules, approve data access requests
Research Coordinator: View de-identified data, edit participant logs, cannot access raw ePHI
Data Analyst: View assigned datasets only, perform analysis, cannot modify security policies
Compliance Officer: View all audit logs, edit governance documents, disable non-compliant accounts
What's Included
- HIPAA Compliance Policies: Customizable policies covering Privacy Rule, Security Rule, and Breach Notification Rule requirements with implementation guidance
- Data Classification Framework: Multi-tier system for categorizing research data by sensitivity with storage, encryption, access, and retention specifications
- Risk Assessment Toolkit: Templates for identifying security threats, evaluating likelihood and impact, calculating risk scores, and documenting mitigation strategies
- Access Control Templates: Role-based access matrices, authorization procedures, and ePHI access restrictions for different research team members
- Audit & Monitoring Procedures: Logging requirements, audit schedules, compliance verification checklists, and monitoring procedures for governance oversight
- Incident Response Playbook: Step-by-step procedures for breach detection, investigation workflows, notification templates, and regulatory reporting requirements
Who It's For
- Compliance Officer
- Healthcare Research Director
- Clinical Trial Manager
- Data Privacy Officer
- Research Administrator
Best For
- Establishing data governance from scratch
- Preparing for compliance audits
- Identifying and mitigating data security risks
- Developing staff training programs
- Standardizing governance across research sites
You might also like
You can systematically review research protocols against ethical frameworks, regulatory standards, and risk-benefit principles. This skill identifies compliance gaps, assesses risks to human or animal subjects, evaluates scientific merit against potential harms, and generates structured compliance reports that support institutional review board (IRB) decisions and regulatory submissions.
by hah23255
You'll design and optimize observational study protocols from conception through regulatory documentation. The skill guides you through identifying and quantifying confounders, selecting appropriate study designs (cohort, case-control, cross-sectional), implementing bias mitigation strategies, and generating publication-ready protocols that meet regulatory standards.
by hah23255
Design, validate, and refine clinical device trial protocols that meet FDA and ICH regulatory requirements. You'll receive detailed protocol structure, endpoint validation matrices, statistical power analysis, and enrollment strategy recommendations that accelerate patient recruitment while maintaining compliance.
by hah23255
You get expert guidance developing NSF-aligned healthcare research proposals from strategic positioning through final compliance. Claude analyzes your research concept against NSF priorities, structures a competitive narrative, justifies budget allocations, and ensures all compliance requirements (biosketch, data management plans, institutional review) are met. The result is a cohesive, review-ready proposal that increases your chances of NSF funding.
by hah23255
You structure clinical research manuscripts according to IMRaD (Introduction, Methods, Results, Discussion) standards required by peer-reviewed journals. This skill helps you draft sections from raw research notes, polish prose for academic clarity, enforce citation standards, and identify common submission issues before sending to journals. The result is a manuscript ready for peer review with minimal editor feedback.
by hah23255
You can systematically work through complex clinical ethical dilemmas using proven frameworks like the Four Principles approach, principlism, casuistry, and virtue ethics. The skill maps all stakeholders, identifies competing ethical obligations, and generates IRB-ready documentation that prepares you for ethics committee consultations. You'll receive structured analysis, conflict resolution pathways, and compliance recommendations tailored to your specific case.
by hah23255
Create fully-accredited continuing medical education programs with learning objectives, educational content, assessments, and evaluation materials that meet ACCME and ANCC standards. This skill automates compliance validation, ensures proper alignment between objectives and content, and generates all required accreditation documentation in minutes instead of weeks.
by hah23255
You can design, validate, and execute statistical analyses for health outcomes research, comparative effectiveness studies, and clinical trials with regulatory rigor. This skill guides you through study design validation, appropriate statistical method selection, data quality assessment, hypothesis testing, and results interpretation aligned with FDA, EMA, and ICH-GCP standards. You'll generate publication-ready analysis plans and ensure your findings meet scientific and regulatory requirements for peer review or submission.
by hah23255