Healthcare Data Governance Framework Builder
Build HIPAA-aligned healthcare data governance frameworks with compliance mapping
What You Can Do
You can design complete data governance frameworks that establish clear ownership, access controls, data quality standards, and breach protocols across EHR systems, data warehouses, and integration platforms. The skill maps regulatory requirements to organizational policies, defines data stewardship roles with accountability matrices, and creates audit procedures and metrics for ongoing compliance monitoring—all in formats ready for board presentation or regulatory review.
Features
Align HIPAA, HITECH, state privacy laws, and 21st Century Cures Act requirements to organizational policies
Create accountability matrices that define ownership, responsibilities, and escalation paths across departments
Develop risk-based classification systems that categorize data by sensitivity and regulatory requirements
Establish protocols for compliance monitoring, breach response, and documentation ready for CMS, OCR, or state attorney general reviews
Generate governance policies in formats suitable for board presentations, staff training, and regulatory submissions
Define procedures for patient access requests, amendments, disclosures, and breach notifications
Create data quality standards specific to EHR, cancer registry, claims, or other healthcare systems
Structure governance documentation to align with accreditation standards and regulatory expectations
Example Output
Example 1: HIPAA Compliance Mapping Document
- Regulation: 45 CFR §164.308(a)(1) — Risk Analysis
- Policy Requirement: Annual risk assessment covering all systems handling PHI
- Responsible Role: Chief Privacy Officer + IT Director
- Evidence: Risk assessment template, vendor attestations, audit logs
Example 2: Data Stewardship Accountability Matrix
| Department | Data Steward | Responsibilities | Escalation |
|---|---|---|---|
| Cardiology | Dr. Smith | EHR data quality, access approvals, audit compliance | Chief Medical Officer |
| Claims | Jane Doe | Claims data completeness, error tracking, breach protocols | Compliance Director |
Example 3: Data Classification Schema
- Level 1 (Public): Non-identifiable, published data
- Level 2 (Internal): De-identified research data, operational metrics
- Level 3 (Confidential): PHI with routine access controls, encryption required
- Level 4 (Restricted): Highly sensitive data (genetic info, behavioral health), role-based access
What's Included
- SKILL.md instruction file: Complete framework-building methodology and compliance principles
- HIPAA Compliance Mapping Template: Checklist linking regulatory requirements to organizational policies
- Data Stewardship Accountability Matrix: Role definition and responsibility assignment template
- Data Classification Schema Worksheet: Risk-based categorization framework for healthcare datasets
- Audit Procedures Checklist: Protocols for ongoing monitoring, documentation, and breach response
- Policy Documentation Outline: Structure for board-ready governance policies and staff training materials
Who It's For
- Health Information Managers — Design and oversee governance frameworks for compliance and operational efficiency
- Compliance Officers — Prepare for regulatory audits and map new requirements to existing policies
- Chief Privacy Officers — Establish privacy governance and breach protocols across enterprise systems
- Healthcare IT Leaders — Define data access controls and stewardship roles for EHR and data warehouse systems
- Clinical Department Heads — Understand data governance expectations and accountability in their specialty areas
Best For
- Building governance frameworks from scratch or overhauling existing ones
- Preparing for regulatory audits (CMS, OCR HIPAA audits, state attorney general reviews)
- Mapping new state privacy laws or federal regulations to organizational policies
- Creating data stewardship accountability matrices across clinical and administrative departments
- Developing data quality standards for specific systems (EHR, cancer registry, claims)
- Establishing data access request, amendment, and breach response protocols
- Training staff on data handling expectations and governance compliance
You might also like
You can conduct thorough healthcare data governance audits by submitting system documentation, access logs, and policy frameworks to Claude. The skill evaluates your systems against HIPAA Privacy and Security Rules, organizational governance policies, and data quality benchmarks—then produces detailed audit reports identifying compliance gaps, governance violations, and specific remediation actions ranked by risk level.
by tdhopper
You can audit medical records against DRG assignment logic to uncover documented but uncoded secondary diagnoses, validate HCC capture, detect sequencing errors that affect DRG weight, and identify compliance risks before claim submission. This skill helps you maximize appropriate reimbursement by ensuring all clinically supported, properly documented conditions are captured and sequenced correctly—distinguishing between legitimate optimization and prohibited upcoding.
by github
You can rapidly evaluate pre-authorization requests by extracting clinical information from provider submissions, mapping findings against medical necessity standards, identifying documentation gaps, and generating clear authorization decisions with detailed rationale. This creates an audit trail that withstands peer review and appeals while supporting provider education through transparent decision logic.
by github
You can systematically decode state-specific grant requirements across Medicaid, workforce development, rural health, and behavioral health programs. The skill helps you identify compliance gaps in your current processes, build state-compliant budget narratives and work plans, and create audit-ready documentation frameworks tailored to your state's unique administrative standards and reporting frequencies.
by github
Conduct thorough retrospective audits of medical coding submissions with structured claim-level analysis, coder performance evaluation, and compliance risk stratification. You'll identify coding errors, quantify compliance violations, validate HCC accuracy, and generate audit documentation that satisfies CMS, OIG, and internal compliance requirements with supporting clinical justification and regulatory references.
by github
You can conduct comprehensive compliance audits of active grants by evaluating them against federal regulations (OMB 2 CFR 200), funder-specific terms, and institutional policies. Claude helps you identify specific compliance gaps, prioritize remediation actions, and create detailed remediation plans that protect institutional funding and reduce audit liability.
by github
You can systematize the entire primary source verification lifecycle—from initial data collection through final documentation—for healthcare providers. This skill manages verification requests across multiple credential categories (licenses, education, DEA, employment history), tracks source coordination timelines, resolves discrepancies between sources, and produces compliance-ready verification reports that satisfy Joint Commission, CMS, and plan network audits.
by github
You can systematically evaluate how political instability, leadership transitions, factional conflicts, and policy shifts affect your health security objectives and medical diplomacy initiatives. The skill identifies specific political vulnerabilities in healthcare infrastructure, pharmaceutical supply chains, aid acceptance, bilateral agreements, and cross-border health cooperation—enabling you to assess feasibility before committing resources and develop contingency protocols for high-risk environments.
by github