Healthcare Research Data Governance Framework Builder
Build HIPAA-compliant data governance frameworks for healthcare research
What You Can Do
You'll develop comprehensive data governance policies, compliance procedures, and audit frameworks specifically tailored to healthcare research programs. This skill ensures your organization meets HIPAA requirements while establishing clear protocols for handling sensitive research data. You'll create standardized governance documentation, risk assessments, and monitoring procedures that protect participant privacy and enable regulatory compliance.
Features
Develops policies aligned with HIPAA Privacy and Security Rules, including required safeguards for ePHI (electronic Protected Health Information) and Breach Notification requirements
Creates multi-tier data classification frameworks that categorize research data by sensitivity, with storage, encryption, access control, and retention specifications for each tier
Generates risk matrices, threat assessment methodologies, and documented mitigation strategies to identify and evaluate data security vulnerabilities specific to research environments
Develops role-based access control (RBAC) systems with detailed authorization matrices, privilege management procedures, and ePHI access restrictions for different research roles
Establishes comprehensive audit trail requirements, logging standards, monitoring schedules, and compliance verification procedures for continuous governance oversight
Creates incident response workflows, notification templates, remediation procedures, and documentation requirements for detecting and managing data breaches
Develops HIPAA awareness training materials, role-specific competency requirements, and assessment tools to ensure research team compliance with policies
Provides standardized forms, checklists, policy templates, and procedure documents for consistent governance implementation across your research organization
Example Output
Data Classification Policy
Tier 1 (Public): De-identified published results, no PHI, standard cloud storage, open access
Tier 2 (Internal): De-identified research data, encrypted internal servers, research team access
Tier 3 (Sensitive): Contains identifiable information, HIPAA-compliant encrypted storage, authorized researchers only
Tier 4 (Restricted): Genetic/biometric data, air-gapped systems, principal investigator approval required
Risk Assessment Matrix
| Data Type | Threat | Likelihood | Impact | Risk Score | Mitigation |
|---|---|---|---|---|---|
| Patient SSN | Unauthorized access | High | Critical | 9 | Encryption at rest/transit, RBAC, monitoring |
| Lab results | Data loss | Medium | High | 6 | Automated backups, version control, redundancy |
| Research notes | Accidental disclosure | Medium | Medium | 4 | Data minimization, access logging, training |
Access Control Matrix
Principal Investigator: View all data, edit protocols and retention rules, approve data access requests
Research Coordinator: View de-identified data, edit participant logs, cannot access raw ePHI
Data Analyst: View assigned datasets only, perform analysis, cannot modify security policies
Compliance Officer: View all audit logs, edit governance documents, disable non-compliant accounts
What's Included
- HIPAA Compliance Policies: Customizable policies covering Privacy Rule, Security Rule, and Breach Notification Rule requirements with implementation guidance
- Data Classification Framework: Multi-tier system for categorizing research data by sensitivity with storage, encryption, access, and retention specifications
- Risk Assessment Toolkit: Templates for identifying security threats, evaluating likelihood and impact, calculating risk scores, and documenting mitigation strategies
- Access Control Templates: Role-based access matrices, authorization procedures, and ePHI access restrictions for different research team members
- Audit & Monitoring Procedures: Logging requirements, audit schedules, compliance verification checklists, and monitoring procedures for governance oversight
- Incident Response Playbook: Step-by-step procedures for breach detection, investigation workflows, notification templates, and regulatory reporting requirements
Who It's For
- Compliance Officer
- Healthcare Research Director
- Clinical Trial Manager
- Data Privacy Officer
- Research Administrator
Best For
- Establishing data governance from scratch
- Preparing for compliance audits
- Identifying and mitigating data security risks
- Developing staff training programs
- Standardizing governance across research sites
You might also like
You can design, validate, and execute statistical analyses for health outcomes research, comparative effectiveness studies, and clinical trials with regulatory rigor. This skill guides you through study design validation, appropriate statistical method selection, data quality assessment, hypothesis testing, and results interpretation aligned with FDA, EMA, and ICH-GCP standards. You'll generate publication-ready analysis plans and ensure your findings meet scientific and regulatory requirements for peer review or submission.
by hah23255
Generate comprehensive drug trial protocols that meet ICH-GCP and regulatory standards. You can develop phase-specific study designs, safety monitoring procedures, informed consent frameworks, and complete regulatory submissions with built-in compliance checks. Claude ensures your documentation aligns with FDA and international regulatory requirements while maintaining scientific rigor.
by hah23255
Create comprehensive data governance policies, compliance frameworks, and access control matrices tailored to healthcare research regulations. Audit existing data management practices against HIPAA, GDPR, and institutional requirements, identify gaps, and generate actionable remediation plans with detailed documentation and risk assessments.
by hah23255
You'll structure promotional materials for medical devices and pharmaceuticals that meet regulatory requirements while maintaining persuasive appeal. This framework helps you balance evidence-based claims, risk/benefit communication, and targeted messaging for different audiences—ensuring your materials are compliant, defensible, and effective.
by hah23255
You'll generate compliant DoD healthcare research proposals by leveraging validated templates, regulatory checklists, and institutional review frameworks. The skill guides you through proposal structure, ensures compliance with DoD-specific requirements (DODI 3216.02, HSPB standards), and provides budget justification templates that meet federal acquisition regulations. You can produce complete proposal sections—from technical narratives to risk mitigation strategies—in hours instead of weeks.
by hah23255
You structure clinical research manuscripts according to IMRaD (Introduction, Methods, Results, Discussion) standards required by peer-reviewed journals. This skill helps you draft sections from raw research notes, polish prose for academic clarity, enforce citation standards, and identify common submission issues before sending to journals. The result is a manuscript ready for peer review with minimal editor feedback.
by hah23255
Systematically evaluate healthcare policies for ethical compliance by mapping them against multiple ethical frameworks (deontological, consequentialist, virtue-based, care ethics), assessing equity impact across populations, and identifying regulatory alignment gaps. You receive structured analysis with ethical tensions, vulnerable populations at risk, compliance recommendations, and alternative policy approaches that optimize for both ethics and feasibility.
by hah23255
This skill helps you develop comprehensive regulatory submission strategies, analyze complex compliance requirements, and navigate jurisdiction-specific pathways. You'll generate detailed submission plans, compliance checklists, and risk assessments that align your product or service with regulatory standards. It guides you through documentation requirements, timeline planning, and stakeholder communication strategies for successful regulatory filings.
by hah23255