Healthcare Data Governance Framework Builder
Build HIPAA-aligned healthcare data governance frameworks with compliance mapping
What You Can Do
You can design complete data governance frameworks that establish clear ownership, access controls, data quality standards, and breach protocols across EHR systems, data warehouses, and integration platforms. The skill maps regulatory requirements to organizational policies, defines data stewardship roles with accountability matrices, and creates audit procedures and metrics for ongoing compliance monitoring—all in formats ready for board presentation or regulatory review.
Features
Align HIPAA, HITECH, state privacy laws, and 21st Century Cures Act requirements to organizational policies
Create accountability matrices that define ownership, responsibilities, and escalation paths across departments
Develop risk-based classification systems that categorize data by sensitivity and regulatory requirements
Establish protocols for compliance monitoring, breach response, and documentation ready for CMS, OCR, or state attorney general reviews
Generate governance policies in formats suitable for board presentations, staff training, and regulatory submissions
Define procedures for patient access requests, amendments, disclosures, and breach notifications
Create data quality standards specific to EHR, cancer registry, claims, or other healthcare systems
Structure governance documentation to align with accreditation standards and regulatory expectations
Example Output
Example 1: HIPAA Compliance Mapping Document
- Regulation: 45 CFR §164.308(a)(1) — Risk Analysis
- Policy Requirement: Annual risk assessment covering all systems handling PHI
- Responsible Role: Chief Privacy Officer + IT Director
- Evidence: Risk assessment template, vendor attestations, audit logs
Example 2: Data Stewardship Accountability Matrix
| Department | Data Steward | Responsibilities | Escalation |
|---|---|---|---|
| Cardiology | Dr. Smith | EHR data quality, access approvals, audit compliance | Chief Medical Officer |
| Claims | Jane Doe | Claims data completeness, error tracking, breach protocols | Compliance Director |
Example 3: Data Classification Schema
- Level 1 (Public): Non-identifiable, published data
- Level 2 (Internal): De-identified research data, operational metrics
- Level 3 (Confidential): PHI with routine access controls, encryption required
- Level 4 (Restricted): Highly sensitive data (genetic info, behavioral health), role-based access
What's Included
- SKILL.md instruction file: Complete framework-building methodology and compliance principles
- HIPAA Compliance Mapping Template: Checklist linking regulatory requirements to organizational policies
- Data Stewardship Accountability Matrix: Role definition and responsibility assignment template
- Data Classification Schema Worksheet: Risk-based categorization framework for healthcare datasets
- Audit Procedures Checklist: Protocols for ongoing monitoring, documentation, and breach response
- Policy Documentation Outline: Structure for board-ready governance policies and staff training materials
Who It's For
- Health Information Managers — Design and oversee governance frameworks for compliance and operational efficiency
- Compliance Officers — Prepare for regulatory audits and map new requirements to existing policies
- Chief Privacy Officers — Establish privacy governance and breach protocols across enterprise systems
- Healthcare IT Leaders — Define data access controls and stewardship roles for EHR and data warehouse systems
- Clinical Department Heads — Understand data governance expectations and accountability in their specialty areas
Best For
- Building governance frameworks from scratch or overhauling existing ones
- Preparing for regulatory audits (CMS, OCR HIPAA audits, state attorney general reviews)
- Mapping new state privacy laws or federal regulations to organizational policies
- Creating data stewardship accountability matrices across clinical and administrative departments
- Developing data quality standards for specific systems (EHR, cancer registry, claims)
- Establishing data access request, amendment, and breach response protocols
- Training staff on data handling expectations and governance compliance
You might also like
You can systematically evaluate how political instability, leadership transitions, factional conflicts, and policy shifts affect your health security objectives and medical diplomacy initiatives. The skill identifies specific political vulnerabilities in healthcare infrastructure, pharmaceutical supply chains, aid acceptance, bilateral agreements, and cross-border health cooperation—enabling you to assess feasibility before committing resources and develop contingency protocols for high-risk environments.
by github
You can systematically assess any sales opportunity across four critical dimensions—fit, budget, timeline, and authority—to determine deal viability and prioritize your pipeline. The skill generates a composite health score (0-100), surfaces risk flags, identifies gaps, and produces a prioritized action plan so you can focus on high-probability opportunities and know exactly what to do next.
by github
You can rapidly evaluate pre-authorization requests by extracting clinical information from provider submissions, mapping findings against medical necessity standards, identifying documentation gaps, and generating clear authorization decisions with detailed rationale. This creates an audit trail that withstands peer review and appeals while supporting provider education through transparent decision logic.
by github
You can transform scattered financial data, program metrics, and budget spreadsheets into comprehensive, compliance-ready grant reports tailored to specific funder requirements. Claude reconciles budgeted versus actual spending, extracts outcomes data, flags variances, and generates audit-trail documentation—reducing manual synthesis work from days to hours while ensuring accuracy and funder alignment.
by github
You can process large volumes of patient feedback—surveys, reviews, complaints, and compliments—to identify recurring themes and emotional patterns that drive satisfaction. Claude reveals which service touchpoints matter most to your patient population, highlights systemic gaps, and generates prioritized improvement initiatives with clear implementation pathways. This transforms reactive complaint handling into proactive satisfaction architecture grounded in data.
by github
You can rapidly assess the healthcare economic implications of trade agreements by analyzing tariff classifications on pharmaceuticals and medical devices, evaluating intellectual property provisions affecting drug market entry, reviewing GATS commitments on healthcare service trade, and identifying competitive advantages or disadvantages across your portfolio countries. This skill helps you quantify market access gains and pricing pressures while flagging regulatory harmonization commitments that affect healthcare delivery.
by github
You can conduct comprehensive HIPAA compliance audits across your healthcare operations by analyzing workflows, documentation patterns, access logs, and Business Associate Agreements against the 18 primary violation categories. Claude identifies compliance gaps, quantifies risk exposure, and generates evidence-based corrective action plans tailored to your specific departmental or organizational context.
by github
You can systematize the entire primary source verification lifecycle—from initial data collection through final documentation—for healthcare providers. This skill manages verification requests across multiple credential categories (licenses, education, DEA, employment history), tracks source coordination timelines, resolves discrepancies between sources, and produces compliance-ready verification reports that satisfy Joint Commission, CMS, and plan network audits.
by github