HIPAA Compliance Documentation Auditor
Generate audit-ready HIPAA compliance documentation with regulatory citations
What You Can Do
You can generate comprehensive, audit-ready HIPAA compliance documentation that synthesizes complex regulatory requirements with your organizational systems. The skill produces regulatory-compliant language, gap analyses, breach notification packages, and corrective action plans with traceable audit trails that satisfy OCR (HHS Office for Civil Rights) expectations—eliminating manual compilation of regulations and policies.
Features
Creates compliant PIAs for new IT systems, workflows, and third-party integrations with regulatory alignment
Generates incident summaries, notification letters, and regulatory reporting documents ready for OCR submission
Maps organizational policies against HIPAA/HITECH Act requirements and identifies compliance gaps with remediation steps
Includes specific CFR citations and regulatory references to support audit defense and board presentations
Documents remediation workflows with timelines, ownership assignments, and verification checkpoints
Reviews BAA language for compliance gaps and generates amendment recommendations
Creates compliance training records and attestations proving workforce education requirements are met
Produces comprehensive reports for internal committees, external auditors, and accreditation reviews with executive summaries
Example Output
Privacy Impact Assessment Output:
- System name, data flows, and PHI inventory
- Risk assessment matrix with probability/impact ratings
- Regulatory compliance checklist (45 CFR §§164.308-318)
- Recommended safeguard enhancements with implementation timeline
Breach Notification Package Output:
- Incident summary with timeline and affected individuals count
- Notification letter template (45 CFR §164.404 compliant)
- OCR reporting checklist and submission requirements
- Internal incident log with containment steps documented
Gap Analysis Report Output:
- Current state vs. required state comparison table
- Risk ratings (Critical/High/Medium/Low) with CFR citations
- Corrective action assignments with responsible parties and deadlines
- Before/after compliance metrics
What's Included
- SKILL.md instruction file: Full skill configuration with regulatory context and use case guidance
- Privacy Impact Assessment template: Structured PIA workflow covering system analysis, risk assessment, and control mapping
- Breach notification package template: Pre-formatted notification letters, incident logs, and OCR submission checklists
- Gap analysis framework: Systematic compliance audit checklist mapping 21 HIPAA Rule safeguard categories
- Corrective action plan template: Remediation tracking with ownership, timelines, and verification steps
Who It's For
- Health Information Managers — Responsible for HIPAA compliance and privacy operations across healthcare organizations
- Compliance Officers — Conduct internal audits, manage regulatory submissions, and oversee corrective actions
- Privacy Officers — Lead privacy assessments, manage breach responses, and document compliance evidence
- Chief Information Security Officers (CISOs) — Assess IT system risks and document safeguard implementations
- Audit and Accreditation Teams — Support external audits, OCR investigations, and accreditation reviews
Best For
- Routine HIPAA compliance assessments across departments or healthcare systems
- Privacy Impact Assessments for new IT systems, EHR implementations, or third-party integrations
- Breach response and incident documentation for regulatory reporting
- Business Associate Agreement review and compliance gap identification
- Corrective action planning following internal audits or OCR findings
- Workforce compliance training documentation and attestation records
You might also like
Process medical staff privileging applications systematically by extracting clinical competencies from CVs and training records, cross-referencing applicant qualifications against institutional privilege scope, and flagging documentation gaps or high-risk scenarios. Generate standardized privilege request matrices and peer review summaries that highlight conflicts between requested privileges and demonstrated training, saving 2-3 hours per complex application while reducing human error in the credentialing workflow.
by github
This skill enables you to conduct structured, evidence-based analyses of denied claims that move beyond surface-level denial codes. You'll categorize denials by true root cause (billing errors, clinical documentation gaps, payor policy misinterpretation, or submission timing issues), assess each claim's appeal viability based on evidence strength, and identify systemic patterns driving recurring rejections. By prioritizing high-value appeals and flagging preventable denials, you transform denial management from reactive firefighting into strategic revenue recovery and process improvement.
by github
You can conduct comprehensive compliance audits of active grants by evaluating them against federal regulations (OMB 2 CFR 200), funder-specific terms, and institutional policies. Claude helps you identify specific compliance gaps, prioritize remediation actions, and create detailed remediation plans that protect institutional funding and reduce audit liability.
by github
You can quickly process provider enrollment applications across multiple payer networks by identifying specific documentation gaps, verifying compliance with Medicare, state medical board, and DEA requirements, and generating compliant follow-up communications. This skill reduces enrollment cycle time and ensures applications are submission-ready on the first request, helping you manage high-volume credentialing workflows efficiently while maintaining audit-trail documentation.
by github
You can systematize the entire primary source verification lifecycle—from initial data collection through final documentation—for healthcare providers. This skill manages verification requests across multiple credential categories (licenses, education, DEA, employment history), tracks source coordination timelines, resolves discrepancies between sources, and produces compliance-ready verification reports that satisfy Joint Commission, CMS, and plan network audits.
by github
This skill moves beyond surface-level denial categorization to uncover systemic root causes affecting your revenue cycle. You'll distinguish between preventable denials (documentation gaps, coding errors, prior auth failures), clinical denials (medical necessity disputes), administrative denials (eligibility issues, timely filing violations), and systemic denials (recurring patterns indicating workflow problems). Claude generates documented appeal strategies with specific evidence and supporting arguments tailored to each denial type.
by github
You can upload payer contracts and receive detailed analysis of reimbursement rates, payment terms, prior authorization requirements, and risk allocation clauses. The skill identifies rate adequacy gaps, flags hidden revenue leakage from bundling definitions and offset clauses, and surfaces negotiation leverage points based on industry benchmarks and your operational data. You'll generate evidence packages and rate scenario models to strengthen your position before contract renewal or amendment discussions.
by github
You can rapidly assess political risks that directly threaten healthcare operations abroad, including government stability, regulatory capture, sanctions impact, and how political transitions affect hospital partnerships. This skill integrates healthcare-specific political factors—pharmaceutical lobby influence, medical licensing corruption, and health system reform dynamics—into a structured risk assessment that informs strategic decisions on expanding, maintaining, or withdrawing from health programs.
by github