Healthcare Research Data Governance Framework Builder
Build HIPAA-compliant data governance frameworks for healthcare research
What You Can Do
You'll develop comprehensive data governance policies, compliance procedures, and audit frameworks specifically tailored to healthcare research programs. This skill ensures your organization meets HIPAA requirements while establishing clear protocols for handling sensitive research data. You'll create standardized governance documentation, risk assessments, and monitoring procedures that protect participant privacy and enable regulatory compliance.
Features
Develops policies aligned with HIPAA Privacy and Security Rules, including required safeguards for ePHI (electronic Protected Health Information) and Breach Notification requirements
Creates multi-tier data classification frameworks that categorize research data by sensitivity, with storage, encryption, access control, and retention specifications for each tier
Generates risk matrices, threat assessment methodologies, and documented mitigation strategies to identify and evaluate data security vulnerabilities specific to research environments
Develops role-based access control (RBAC) systems with detailed authorization matrices, privilege management procedures, and ePHI access restrictions for different research roles
Establishes comprehensive audit trail requirements, logging standards, monitoring schedules, and compliance verification procedures for continuous governance oversight
Creates incident response workflows, notification templates, remediation procedures, and documentation requirements for detecting and managing data breaches
Develops HIPAA awareness training materials, role-specific competency requirements, and assessment tools to ensure research team compliance with policies
Provides standardized forms, checklists, policy templates, and procedure documents for consistent governance implementation across your research organization
Example Output
Data Classification Policy
Tier 1 (Public): De-identified published results, no PHI, standard cloud storage, open access
Tier 2 (Internal): De-identified research data, encrypted internal servers, research team access
Tier 3 (Sensitive): Contains identifiable information, HIPAA-compliant encrypted storage, authorized researchers only
Tier 4 (Restricted): Genetic/biometric data, air-gapped systems, principal investigator approval required
Risk Assessment Matrix
| Data Type | Threat | Likelihood | Impact | Risk Score | Mitigation |
|---|---|---|---|---|---|
| Patient SSN | Unauthorized access | High | Critical | 9 | Encryption at rest/transit, RBAC, monitoring |
| Lab results | Data loss | Medium | High | 6 | Automated backups, version control, redundancy |
| Research notes | Accidental disclosure | Medium | Medium | 4 | Data minimization, access logging, training |
Access Control Matrix
Principal Investigator: View all data, edit protocols and retention rules, approve data access requests
Research Coordinator: View de-identified data, edit participant logs, cannot access raw ePHI
Data Analyst: View assigned datasets only, perform analysis, cannot modify security policies
Compliance Officer: View all audit logs, edit governance documents, disable non-compliant accounts
What's Included
- HIPAA Compliance Policies: Customizable policies covering Privacy Rule, Security Rule, and Breach Notification Rule requirements with implementation guidance
- Data Classification Framework: Multi-tier system for categorizing research data by sensitivity with storage, encryption, access, and retention specifications
- Risk Assessment Toolkit: Templates for identifying security threats, evaluating likelihood and impact, calculating risk scores, and documenting mitigation strategies
- Access Control Templates: Role-based access matrices, authorization procedures, and ePHI access restrictions for different research team members
- Audit & Monitoring Procedures: Logging requirements, audit schedules, compliance verification checklists, and monitoring procedures for governance oversight
- Incident Response Playbook: Step-by-step procedures for breach detection, investigation workflows, notification templates, and regulatory reporting requirements
Who It's For
- Compliance Officer
- Healthcare Research Director
- Clinical Trial Manager
- Data Privacy Officer
- Research Administrator
Best For
- Establishing data governance from scratch
- Preparing for compliance audits
- Identifying and mitigating data security risks
- Developing staff training programs
- Standardizing governance across research sites
You might also like
This assistant automates creation of HIPAA-compliant archival documentation, metadata templates, and retention schedules for your research datasets. You get customized compliance checklists, de-identification verification, and institutional review board-ready documentation tailored to your funding agency requirements. Perfect for research institutions managing sensitive health data with strict regulatory and audit trail obligations.
by hah23255
You can design comprehensive clinical trial protocols that meet FDA and ICH-GCP requirements, develop rigorous patient eligibility criteria, and establish safety monitoring frameworks that protect trial participants. This skill helps you assess inclusion/exclusion criteria, define safety endpoints, plan statistical analyses, and generate regulatory-ready documentation—accelerating protocol development from concept to submission-ready draft.
by hah23255
Generate comprehensive drug trial protocols that meet ICH-GCP and regulatory standards. You can develop phase-specific study designs, safety monitoring procedures, informed consent frameworks, and complete regulatory submissions with built-in compliance checks. Claude ensures your documentation aligns with FDA and international regulatory requirements while maintaining scientific rigor.
by hah23255
You'll generate compliant DoD healthcare research proposals by leveraging validated templates, regulatory checklists, and institutional review frameworks. The skill guides you through proposal structure, ensures compliance with DoD-specific requirements (DODI 3216.02, HSPB standards), and provides budget justification templates that meet federal acquisition regulations. You can produce complete proposal sections—from technical narratives to risk mitigation strategies—in hours instead of weeks.
by hah23255
Systematically evaluate healthcare policies for ethical compliance by mapping them against multiple ethical frameworks (deontological, consequentialist, virtue-based, care ethics), assessing equity impact across populations, and identifying regulatory alignment gaps. You receive structured analysis with ethical tensions, vulnerable populations at risk, compliance recommendations, and alternative policy approaches that optimize for both ethics and feasibility.
by hah23255
This skill guides you through the complete statistical workflow for genomic research—from study design and sample size determination to analysis method selection and result interpretation. You get evidence-based recommendations for handling genomic data's unique challenges: multiple testing correction, batch effects, and small-sample inference. Each recommendation includes the reasoning, assumptions, and limitations so you can make informed choices for your research.
by hah23255
Design, validate, and refine clinical device trial protocols that meet FDA and ICH regulatory requirements. You'll receive detailed protocol structure, endpoint validation matrices, statistical power analysis, and enrollment strategy recommendations that accelerate patient recruitment while maintaining compliance.
by hah23255
You can design, validate, and execute statistical analyses for health outcomes research, comparative effectiveness studies, and clinical trials with regulatory rigor. This skill guides you through study design validation, appropriate statistical method selection, data quality assessment, hypothesis testing, and results interpretation aligned with FDA, EMA, and ICH-GCP standards. You'll generate publication-ready analysis plans and ensure your findings meet scientific and regulatory requirements for peer review or submission.
by hah23255