Healthcare Data Governance Framework Builder
Build HIPAA-aligned healthcare data governance frameworks with compliance mapping
What You Can Do
You can design complete data governance frameworks that establish clear ownership, access controls, data quality standards, and breach protocols across EHR systems, data warehouses, and integration platforms. The skill maps regulatory requirements to organizational policies, defines data stewardship roles with accountability matrices, and creates audit procedures and metrics for ongoing compliance monitoring—all in formats ready for board presentation or regulatory review.
Features
Align HIPAA, HITECH, state privacy laws, and 21st Century Cures Act requirements to organizational policies
Create accountability matrices that define ownership, responsibilities, and escalation paths across departments
Develop risk-based classification systems that categorize data by sensitivity and regulatory requirements
Establish protocols for compliance monitoring, breach response, and documentation ready for CMS, OCR, or state attorney general reviews
Generate governance policies in formats suitable for board presentations, staff training, and regulatory submissions
Define procedures for patient access requests, amendments, disclosures, and breach notifications
Create data quality standards specific to EHR, cancer registry, claims, or other healthcare systems
Structure governance documentation to align with accreditation standards and regulatory expectations
Example Output
Example 1: HIPAA Compliance Mapping Document
- Regulation: 45 CFR §164.308(a)(1) — Risk Analysis
- Policy Requirement: Annual risk assessment covering all systems handling PHI
- Responsible Role: Chief Privacy Officer + IT Director
- Evidence: Risk assessment template, vendor attestations, audit logs
Example 2: Data Stewardship Accountability Matrix
| Department | Data Steward | Responsibilities | Escalation |
|---|---|---|---|
| Cardiology | Dr. Smith | EHR data quality, access approvals, audit compliance | Chief Medical Officer |
| Claims | Jane Doe | Claims data completeness, error tracking, breach protocols | Compliance Director |
Example 3: Data Classification Schema
- Level 1 (Public): Non-identifiable, published data
- Level 2 (Internal): De-identified research data, operational metrics
- Level 3 (Confidential): PHI with routine access controls, encryption required
- Level 4 (Restricted): Highly sensitive data (genetic info, behavioral health), role-based access
What's Included
- SKILL.md instruction file: Complete framework-building methodology and compliance principles
- HIPAA Compliance Mapping Template: Checklist linking regulatory requirements to organizational policies
- Data Stewardship Accountability Matrix: Role definition and responsibility assignment template
- Data Classification Schema Worksheet: Risk-based categorization framework for healthcare datasets
- Audit Procedures Checklist: Protocols for ongoing monitoring, documentation, and breach response
- Policy Documentation Outline: Structure for board-ready governance policies and staff training materials
Who It's For
- Health Information Managers — Design and oversee governance frameworks for compliance and operational efficiency
- Compliance Officers — Prepare for regulatory audits and map new requirements to existing policies
- Chief Privacy Officers — Establish privacy governance and breach protocols across enterprise systems
- Healthcare IT Leaders — Define data access controls and stewardship roles for EHR and data warehouse systems
- Clinical Department Heads — Understand data governance expectations and accountability in their specialty areas
Best For
- Building governance frameworks from scratch or overhauling existing ones
- Preparing for regulatory audits (CMS, OCR HIPAA audits, state attorney general reviews)
- Mapping new state privacy laws or federal regulations to organizational policies
- Creating data stewardship accountability matrices across clinical and administrative departments
- Developing data quality standards for specific systems (EHR, cancer registry, claims)
- Establishing data access request, amendment, and breach response protocols
- Training staff on data handling expectations and governance compliance
You might also like
Process medical staff privileging applications systematically by extracting clinical competencies from CVs and training records, cross-referencing applicant qualifications against institutional privilege scope, and flagging documentation gaps or high-risk scenarios. Generate standardized privilege request matrices and peer review summaries that highlight conflicts between requested privileges and demonstrated training, saving 2-3 hours per complex application while reducing human error in the credentialing workflow.
by github
This skill enables you to conduct structured, evidence-based analyses of denied claims that move beyond surface-level denial codes. You'll categorize denials by true root cause (billing errors, clinical documentation gaps, payor policy misinterpretation, or submission timing issues), assess each claim's appeal viability based on evidence strength, and identify systemic patterns driving recurring rejections. By prioritizing high-value appeals and flagging preventable denials, you transform denial management from reactive firefighting into strategic revenue recovery and process improvement.
by github
You can conduct comprehensive compliance audits of active grants by evaluating them against federal regulations (OMB 2 CFR 200), funder-specific terms, and institutional policies. Claude helps you identify specific compliance gaps, prioritize remediation actions, and create detailed remediation plans that protect institutional funding and reduce audit liability.
by github
You can quickly process provider enrollment applications across multiple payer networks by identifying specific documentation gaps, verifying compliance with Medicare, state medical board, and DEA requirements, and generating compliant follow-up communications. This skill reduces enrollment cycle time and ensures applications are submission-ready on the first request, helping you manage high-volume credentialing workflows efficiently while maintaining audit-trail documentation.
by github
You can systematize the entire primary source verification lifecycle—from initial data collection through final documentation—for healthcare providers. This skill manages verification requests across multiple credential categories (licenses, education, DEA, employment history), tracks source coordination timelines, resolves discrepancies between sources, and produces compliance-ready verification reports that satisfy Joint Commission, CMS, and plan network audits.
by github
This skill moves beyond surface-level denial categorization to uncover systemic root causes affecting your revenue cycle. You'll distinguish between preventable denials (documentation gaps, coding errors, prior auth failures), clinical denials (medical necessity disputes), administrative denials (eligibility issues, timely filing violations), and systemic denials (recurring patterns indicating workflow problems). Claude generates documented appeal strategies with specific evidence and supporting arguments tailored to each denial type.
by github
You can upload payer contracts and receive detailed analysis of reimbursement rates, payment terms, prior authorization requirements, and risk allocation clauses. The skill identifies rate adequacy gaps, flags hidden revenue leakage from bundling definitions and offset clauses, and surfaces negotiation leverage points based on industry benchmarks and your operational data. You'll generate evidence packages and rate scenario models to strengthen your position before contract renewal or amendment discussions.
by github
You can rapidly assess political risks that directly threaten healthcare operations abroad, including government stability, regulatory capture, sanctions impact, and how political transitions affect hospital partnerships. This skill integrates healthcare-specific political factors—pharmaceutical lobby influence, medical licensing corruption, and health system reform dynamics—into a structured risk assessment that informs strategic decisions on expanding, maintaining, or withdrawing from health programs.
by github