Regulatory Compliance Gap Analysis for Healthcare
Identify healthcare compliance gaps and prioritize remediation
What You Can Do
You provide Claude with your healthcare organization's current regulatory landscape and operations, and Claude analyzes your compliance posture against relevant frameworks (HIPAA, CMS requirements, state regulations, accreditation standards). Claude identifies specific compliance gaps, categorizes them by risk level and remediation effort, and creates a prioritized action plan with evidence requirements and timeline estimates. The result is a comprehensive roadmap that helps your team focus resources on the highest-impact compliance improvements.
Features
Simultaneously assess compliance against HIPAA, CMS Conditions of Participation, state healthcare regulations, and accreditation bodies. Claude identifies gaps specific to each framework and highlights overlapping requirements.
Gaps are ranked by regulatory risk (enforcement likelihood, penalty severity) and operational impact. Focus remediation efforts on the issues that matter most to your organization and regulators.
For each gap, Claude specifies what evidence or documentation you need to collect, where it should come from, and how to organize it for audits or regulatory submissions.
Get a step-by-step action plan with estimated effort (hours/cost), dependencies between fixes, and realistic timelines. Know exactly what to fix, in what order, and by when.
Calculate your current compliance score (0-100%) and track progress after each remediation. Benchmark against industry standards and set improvement targets.
Claude evaluates your readiness for external audits, identifies likely audit questions, and flags documentation gaps before regulators ask.
Analyze your existing policies against regulatory requirements. Claude spots missing policies, outdated procedures, and language that doesn't meet current standards.
Stay informed on recent regulatory changes and how they impact your compliance posture. Claude identifies areas where new rules require your attention.
Example Output
Gap Analysis Summary for General Medical Practice
Overall Compliance Score: 72/100 ← Down from 76 after CMS 2024 updates
Critical Gaps (Remediate Immediately):
- ✗ Medical Record Authentication: Lacking documented supervision policy for clinician orders per CMS CoPs Section 482.12(c). Effort: 4 hours | Timeline: 1 week
- ✗ Patient Data Breach Response: No documented breach notification plan for incidents >500 patients. HIPAA violation risk. Effort: 12 hours | Timeline: 2 weeks
High-Priority Gaps (Remediate Within 90 Days):
- ✗ HIPAA Security Rule Updates (2024): Business associate agreements don't reference new encryption standards. Effort: 8 hours | Timeline: 30 days
- ✗ Workforce Security Training: Last training was 2022; annual requirement not met. Effort: 3 hours + staff time | Timeline: 45 days
Evidence Needed for Audit:
- Signed attestation from compliance officer on breach response testing
- Training sign-in sheets and completion certificates (2024)
- Updated BAA templates with current encryption language
Next Steps: Assign breach response plan (highest risk) to compliance lead. Schedule training by Sept 30.
What's Included
- Compliance Assessment Framework: Pre-built questionnaire covering HIPAA Privacy/Security/Breach Notification Rules, CMS Conditions of Participation, state-specific healthcare laws, and common accreditation standards.
- Gap Prioritization Matrix: Structured decision table that ranks gaps by regulatory risk, enforcement history, audit likelihood, and remediation complexity. Helps you allocate resources efficiently.
- Remediation Action Plan Template: Customizable roadmap with specific actions, assigned owners, deadlines, success criteria, and evidence checkpoints for each compliance gap.
- Risk Scoring Rubric: Healthcare-specific scoring system for evaluating regulatory exposure, organizational impact, and remediation feasibility. Consistent methodology across multiple reviews.
- Evidence Collection Checklist: For each gap, a detailed checklist of documentation, logs, policies, training records, and audit trails needed to demonstrate compliance to regulators.
- Regulatory Reference Guide: Quick-lookup summaries of key healthcare regulations (HIPAA, CMS CoPs, state laws), including citations, deadlines, and common violation patterns.
Who It's For
- Compliance Officers and Compliance Teams
- Healthcare IT Directors and HIPAA Privacy Officers
- Medical Practice and Clinic Administrators
- Hospital Compliance and Quality Departments
- Healthcare Consultants and Interim Compliance Leads
Best For
- Initial compliance audits when gaps are unknown
- Preparing for regulatory inspections or accreditation reviews
- Prioritizing remediation work during resource constraints
- Tracking compliance progress and post-remediation validation
- Bridging compliance expertise gaps during staff turnover
You might also like
You'll analyze trade secret exposure patterns, identify litigation vulnerabilities, and develop comprehensive strategies to protect proprietary information. The skill generates state-compliant protective agreements, litigation strategy memos, and employee exit protocols that strengthen your position in misappropriation disputes. You get immediate assessment of trade secret qualification, damages analysis, and court strategy tailored to your specific facts and jurisdiction.
by jzocb
Analyze class certification requirements under Rule 23 and state law equivalents, then generate comprehensive commonality and typicality arguments for your class action pleadings. You provide case facts and certification elements; the skill produces persuasive legal arguments grounded in applicable precedent, identifies weaknesses in your position, and adapts reasoning to federal or state standards.
by jzocb
Streamline your multi-state medical licensing compliance by verifying healthcare provider credentials across state medical boards, analyzing complex regulatory requirements, and identifying compliance gaps. This skill helps you track regulatory changes, prepare audit-ready documentation, and ensure your organization meets all licensing and credentialing standards across jurisdictions.
by jzocb
You provide Claude with field notes, voice transcripts, or photos from your daily site walk. Claude generates a complete Daily Site Report (DSR) with weather, crew status, and material tracking; identifies and prioritizes critical issues with escalation flags; drafts RFI and Change Order templates for scope ambiguities; and assesses risks that feed into your project risk log. This transforms 1–2 hours of manual documentation into 15–20 minutes of structured, legally compliant output.
by jzocb
This skill enables you to systematically analyze child support cases by extracting financial data from documents, calculating guideline-compliant support amounts, and identifying legal deviation factors. You can build comprehensive evidence summaries and arguments that align with your jurisdiction's child support formulas. The skill accelerates case preparation and helps you construct defensible support calculations backed by structured financial analysis.
by jzocb
You can analyze existing non-compete agreements to identify key terms, clauses, and enforceability risks based on jurisdiction-specific legal standards. The skill drafts enforceable non-compete language tailored to your industry and location, and provides detailed risk assessments with recommendations for strengthening agreements and reducing litigation exposure.
by jzocb
You can build a comprehensive risk register that surfaces hidden dependencies, quantifies business impact of technical failures, and ensures every identified risk has an owner and mitigation strategy. This skill guides you through structured risk identification at project kickoff, continuous updates during execution, and defensible escalation to stakeholders with clear trade-off analysis.
by jzocb
Assess client estates for federal and state tax exposure, calculate exemption utilization across multiple scenarios, and generate compliance-verified strategies. You'll receive detailed liability projections, asset allocation recommendations, and specific action items for tax minimization—all tied to current exemption limits and portability rules.
by jzocb