Research Data Governance Policy Generator & Auditor
Generate and audit healthcare research data governance policies instantly
What You Can Do
Create comprehensive data governance policies, compliance frameworks, and access control matrices tailored to healthcare research regulations. Audit existing data management practices against HIPAA, GDPR, and institutional requirements, identify gaps, and generate actionable remediation plans with detailed documentation and risk assessments.
Features
Instantly generate customized data governance policy templates for research organizations, including data classification, retention, and handling procedures aligned with your institutional requirements.
Map your data practices against HIPAA, GDPR, FISMA, and other regulatory frameworks with detailed gap analysis and specific remediation recommendations.
Create granular role-based access control (RBAC) policies specifying who can access what data, under what conditions, and with what audit requirements.
Generate comprehensive audit checklists covering data inventory, access logs, breach protocols, training requirements, and regulatory documentation.
Identify data handling risks, quantify compliance gaps, and prioritize remediation efforts with severity ratings and business impact analysis.
Develop data classification systems categorizing research data by sensitivity level and regulatory requirements, driving appropriate security and access controls.
Validate policies against common compliance pitfalls and regulatory requirements, testing for ambiguity, enforcement feasibility, and completeness.
Example Output
Sample Policy Output:
Data Access Control Policy
- Data Classification: PHI, PII, De-identified Research Data
- Access Levels: Restricted (PI only), Limited (Research Team), Public (Published Data)
- Approval Workflow: PI → IRB → Compliance Officer
- Audit Frequency: Monthly access reviews, Quarterly security assessments
Sample Audit Report:
- ✓ Data inventory complete with 1,247 datasets cataloged
- ✗ GAP: 23% of datasets lack formal access controls (Priority: High)
- ✗ GAP: No documented data retention schedule (Priority: Critical)
- ✓ Breach response plan exists and tested annually
Compliance Matrix:
| Requirement | HIPAA | GDPR | Status | Evidence |
|---|---|---|---|---|
| Data minimization | ✓ | ✓ | Implemented | DUA section 3.2 |
| Right to deletion | — | ✓ | Gap | Policy v1.2 |
| Breach notification | ✓ | ✓ | Implemented | Proc-2024-08 |
What's Included
- Policy Templates Library: 20+ customizable templates covering data governance, access controls, retention schedules, breach response, and acceptable use policies for research environments.
- Compliance Audit Framework: Structured audit process with scoring rubrics, gap identification, and prioritized remediation roadmaps aligned with HIPAA, GDPR, and institutional standards.
- Risk Assessment Matrices: Pre-built frameworks for evaluating data handling risks, calculating compliance scores, and documenting risk ownership and mitigation strategies.
- Access Control Design Guides: Step-by-step guidance for building role-based access control systems, approval workflows, and audit logging tied to research roles and data sensitivity.
- Regulatory Reference Library: Curated mapping of HIPAA Security Rule, GDPR Articles, and common IRB requirements to specific policy controls and compliance activities.
Who It's For
- Research Data Managers
- Compliance Officers & Privacy Leaders
- Healthcare IT Governance Teams
- Research Ethics Committee Members
- Information Security Officers in Academic Medical Centers
Best For
- Creating data governance policies from scratch
- Auditing existing data management practices
- Building role-based access control systems
- Preparing for compliance audits and regulatory reviews
- Developing data classification and retention frameworks
You might also like
You can design comprehensive clinical trial protocols that meet FDA and ICH-GCP requirements, develop rigorous patient eligibility criteria, and establish safety monitoring frameworks that protect trial participants. This skill helps you assess inclusion/exclusion criteria, define safety endpoints, plan statistical analyses, and generate regulatory-ready documentation—accelerating protocol development from concept to submission-ready draft.
by hah23255
You'll generate compliant DoD healthcare research proposals by leveraging validated templates, regulatory checklists, and institutional review frameworks. The skill guides you through proposal structure, ensures compliance with DoD-specific requirements (DODI 3216.02, HSPB standards), and provides budget justification templates that meet federal acquisition regulations. You can produce complete proposal sections—from technical narratives to risk mitigation strategies—in hours instead of weeks.
by hah23255
Systematically evaluate healthcare policies for ethical compliance by mapping them against multiple ethical frameworks (deontological, consequentialist, virtue-based, care ethics), assessing equity impact across populations, and identifying regulatory alignment gaps. You receive structured analysis with ethical tensions, vulnerable populations at risk, compliance recommendations, and alternative policy approaches that optimize for both ethics and feasibility.
by hah23255
You can systematically analyze research protocols against ethical principles, regulatory frameworks, and IRB standards to identify risks before submission. Claude reviews your protocol to ensure vulnerable populations receive appropriate protections, verify informed consent meets regulatory adequacy, detect conflicts of interest and bias, and generate actionable recommendations for strengthening ethical safeguards.
by hah23255
Generate comprehensive drug trial protocols that meet ICH-GCP and regulatory standards. You can develop phase-specific study designs, safety monitoring procedures, informed consent frameworks, and complete regulatory submissions with built-in compliance checks. Claude ensures your documentation aligns with FDA and international regulatory requirements while maintaining scientific rigor.
by hah23255
This skill guides you through the complete statistical workflow for genomic research—from study design and sample size determination to analysis method selection and result interpretation. You get evidence-based recommendations for handling genomic data's unique challenges: multiple testing correction, batch effects, and small-sample inference. Each recommendation includes the reasoning, assumptions, and limitations so you can make informed choices for your research.
by hah23255
Design, validate, and refine clinical device trial protocols that meet FDA and ICH regulatory requirements. You'll receive detailed protocol structure, endpoint validation matrices, statistical power analysis, and enrollment strategy recommendations that accelerate patient recruitment while maintaining compliance.
by hah23255
This assistant automates creation of HIPAA-compliant archival documentation, metadata templates, and retention schedules for your research datasets. You get customized compliance checklists, de-identification verification, and institutional review board-ready documentation tailored to your funding agency requirements. Perfect for research institutions managing sensitive health data with strict regulatory and audit trail obligations.
by hah23255