Research Data Governance Policy Generator & Auditor
Generate and audit healthcare research data governance policies instantly
What You Can Do
Create comprehensive data governance policies, compliance frameworks, and access control matrices tailored to healthcare research regulations. Audit existing data management practices against HIPAA, GDPR, and institutional requirements, identify gaps, and generate actionable remediation plans with detailed documentation and risk assessments.
Features
Instantly generate customized data governance policy templates for research organizations, including data classification, retention, and handling procedures aligned with your institutional requirements.
Map your data practices against HIPAA, GDPR, FISMA, and other regulatory frameworks with detailed gap analysis and specific remediation recommendations.
Create granular role-based access control (RBAC) policies specifying who can access what data, under what conditions, and with what audit requirements.
Generate comprehensive audit checklists covering data inventory, access logs, breach protocols, training requirements, and regulatory documentation.
Identify data handling risks, quantify compliance gaps, and prioritize remediation efforts with severity ratings and business impact analysis.
Develop data classification systems categorizing research data by sensitivity level and regulatory requirements, driving appropriate security and access controls.
Validate policies against common compliance pitfalls and regulatory requirements, testing for ambiguity, enforcement feasibility, and completeness.
Example Output
Sample Policy Output:
Data Access Control Policy
- Data Classification: PHI, PII, De-identified Research Data
- Access Levels: Restricted (PI only), Limited (Research Team), Public (Published Data)
- Approval Workflow: PI → IRB → Compliance Officer
- Audit Frequency: Monthly access reviews, Quarterly security assessments
Sample Audit Report:
- ✓ Data inventory complete with 1,247 datasets cataloged
- ✗ GAP: 23% of datasets lack formal access controls (Priority: High)
- ✗ GAP: No documented data retention schedule (Priority: Critical)
- ✓ Breach response plan exists and tested annually
Compliance Matrix:
| Requirement | HIPAA | GDPR | Status | Evidence |
|---|---|---|---|---|
| Data minimization | ✓ | ✓ | Implemented | DUA section 3.2 |
| Right to deletion | — | ✓ | Gap | Policy v1.2 |
| Breach notification | ✓ | ✓ | Implemented | Proc-2024-08 |
What's Included
- Policy Templates Library: 20+ customizable templates covering data governance, access controls, retention schedules, breach response, and acceptable use policies for research environments.
- Compliance Audit Framework: Structured audit process with scoring rubrics, gap identification, and prioritized remediation roadmaps aligned with HIPAA, GDPR, and institutional standards.
- Risk Assessment Matrices: Pre-built frameworks for evaluating data handling risks, calculating compliance scores, and documenting risk ownership and mitigation strategies.
- Access Control Design Guides: Step-by-step guidance for building role-based access control systems, approval workflows, and audit logging tied to research roles and data sensitivity.
- Regulatory Reference Library: Curated mapping of HIPAA Security Rule, GDPR Articles, and common IRB requirements to specific policy controls and compliance activities.
Who It's For
- Research Data Managers
- Compliance Officers & Privacy Leaders
- Healthcare IT Governance Teams
- Research Ethics Committee Members
- Information Security Officers in Academic Medical Centers
Best For
- Creating data governance policies from scratch
- Auditing existing data management practices
- Building role-based access control systems
- Preparing for compliance audits and regulatory reviews
- Developing data classification and retention frameworks
You might also like
You can automate the creation of comprehensive, regulatory-compliant Statistical Analysis Plans (SAPs) for clinical trials. The skill generates complete SAP documents with FDA/ICH-aligned sections, performs compliance validation, optimizes statistical methodologies, and ensures consistency with trial protocols—reducing SAP development time from weeks to days.
by hah23255
You'll design and optimize observational study protocols from conception through regulatory documentation. The skill guides you through identifying and quantifying confounders, selecting appropriate study designs (cohort, case-control, cross-sectional), implementing bias mitigation strategies, and generating publication-ready protocols that meet regulatory standards.
by hah23255
You structure clinical research manuscripts according to IMRaD (Introduction, Methods, Results, Discussion) standards required by peer-reviewed journals. This skill helps you draft sections from raw research notes, polish prose for academic clarity, enforce citation standards, and identify common submission issues before sending to journals. The result is a manuscript ready for peer review with minimal editor feedback.
by hah23255
You'll compose regulatory submission documents like Common Technical Documents (CTD), Periodic Safety Updates (PSUR), and Quality Overall Summaries with built-in FDA, EMA, and ICH compliance checks. This skill accelerates document drafting by applying structured templates aligned with regulatory guidelines, reducing revision cycles and ensuring professional-quality submissions. Every generated module is validated for completeness, consistency, and traceability across related sections.
by hah23255
You can systematically review research protocols against ethical frameworks, regulatory standards, and risk-benefit principles. This skill identifies compliance gaps, assesses risks to human or animal subjects, evaluates scientific merit against potential harms, and generates structured compliance reports that support institutional review board (IRB) decisions and regulatory submissions.
by hah23255
This skill guides you through curating, documenting, and establishing governance for research datasets. You'll define metadata schemas, create quality assessment checklists, build access control policies, and ensure compliance with institutional standards—all with Claude's help structuring complex governance decisions.
by hah23255
You'll develop comprehensive data governance policies, compliance procedures, and audit frameworks specifically tailored to healthcare research programs. This skill ensures your organization meets HIPAA requirements while establishing clear protocols for handling sensitive research data. You'll create standardized governance documentation, risk assessments, and monitoring procedures that protect participant privacy and enable regulatory compliance.
by hah23255
You can design, validate, and execute statistical analyses for health outcomes research, comparative effectiveness studies, and clinical trials with regulatory rigor. This skill guides you through study design validation, appropriate statistical method selection, data quality assessment, hypothesis testing, and results interpretation aligned with FDA, EMA, and ICH-GCP standards. You'll generate publication-ready analysis plans and ensure your findings meet scientific and regulatory requirements for peer review or submission.
by hah23255