Search legal-AI skills

Chart Audit Protocol

Apache-2.0United StatesHealthcare

Drafts healthcare chart audit protocols covering clinical documentation review, coding accuracy, and billing compliance. Aligns with Medicare CoPs, OIG Compliance Program Guidance, RAC preparedness, federal sentencing guidelines, and the 60-day overpayment rule. Use when drafting routine periodic audits, targeted risk reviews, proactive compliance measures, or post-regulatory-update assessments.

COPYRIGHT NOTICE

MITGeneralHealthcare

Drafts regulatory documents for healthcare workflows using an automated agent. Use this skill when regulatory drafting tasks need to be executed via the defined coworker script within a 15-minute workflow.

Corporate Practice of Medicine Compliance

Apache-2.0United StatesHealthcare

Drafts Corporate Practice of Medicine (CPOM) compliance structure documents for healthcare entities. Covers compliant organizational models (PC/PA, MSO, friendly PC), MSA architecture, operational compliance checklists, and state-specific regulatory analysis. Use when structuring healthcare operations, reviewing CPOM compliance, drafting MSO/MSA arrangements, or advising on physician practice ownership in CPOM-restricted jurisdictions.

Corrective Action Plan for Healthcare Deficiencies

Apache-2.0United StatesHealthcare

Drafts a regulator-ready Corrective Action Plan (CAP) for U.S. healthcare facilities responding to inspection, survey, or audit deficiencies. Covers root-cause analysis, remediation steps, accountability, milestones, monitoring, and validation. Trigger when the user mentions CAP, plan of correction, deficiency citation, scope/severity remediation, correction timeline, or sustainability monitoring for CMS, state, or Joint Commission findings.

Corrective Action Plan (Healthcare)

Apache-2.0United StatesHealthcare

Drafts U.S. healthcare corrective action plans (CAPs / plans of correction) responding to survey deficiencies, audits, or inspections. Produces deficiency statements, root cause analysis, corrective actions, accountability assignments, timelines, monitoring, and validation aligned to CMS, Joint Commission, and state health department standards. Triggers on CAP, plan of correction, statement of deficiencies, survey findings, accreditation response, regulatory remediation, QAPI corrective action.

Executing HIPAA Breach Notification

Apache-2.0United StatesHealthcare

Executes breach notification under HIPAA Breach Notification Rule (45 CFR 164.400-414). Covers 60-day individual notification, HHS/OCR reporting for breaches of 500+ individuals (immediate) and under 500 (annual log), state attorney general notification, media notification for 500+ in a single state, and breach risk assessment using the four-factor test. Keywords: HIPAA, breach notification, PHI, HHS, OCR, covered entity, business associate.

Fachanwalt für Medizinrecht — Orientierung

Apache-2.0GermanyHealthcare

Für Fachanwalt für Medizinrecht — Orientierung: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.

Healthcare AI Privacy — HIPAA and AI Act Intersection

Apache-2.0Cross-jurisdictionHealthcare

Addresses healthcare AI privacy at the intersection of HIPAA and the EU AI Act for clinical decision support systems. Covers training data PHI handling, model transparency and explainability, patient rights in algorithmic decisions, FDA/OCR regulatory coordination, and bias monitoring. Keywords: healthcare AI, HIPAA, AI Act, clinical decision support, PHI training data, model transparency.

Healthcare Corrective Action Plan

Apache-2.0United StatesHealthcare

Drafts healthcare Corrective Action Plans (CAPs) responding to CMS survey deficiencies, Joint Commission findings, state inspection citations, or internal audit results. Structures root cause analysis, remediation steps, accountability, timelines, and monitoring. Use when drafting plans of correction, responding to immediate jeopardy findings, condition-level citations, or standard-level deficiencies.

Healthcare Law in MENA

MITGeneralHealthcare

Use when advising on healthcare law, medical licensing, telemedicine regulation, AI-in-healthcare compliance, or medical malpractice in MENA jurisdictions. Covers the licensing and regulatory frameworks of MoH (UAE/KSA/Lebanon/Egypt), DHA, HAAD/DoH, SCFHS, telemedicine rules, data privacy for health records, and the regulatory treatment of AI diagnostic tools. Reach for this skill when the user asks about healthcare licensing, telemedicine law, medical malpractice, or health-sector AI regulation in MENA.

Healthcare Marketing Compliance

MITCross-jurisdictionHealthcare

Healthcare marketing compliance discipline covering the full pre-publication review lifecycle: claim substantiation against clinical-evidence hierarchy, FDA / FTC / Anvisa RDC 96 / EMA / EFPIA promotional rules, off-label use prohibition, fair-balance obligations (efficacy and safety in proportion), testimonial and HCP-engagement restrictions under Sunshine Act / Open Payments / EFPIA Disclosure Code, and PII / PHI handling in campaign analytics (HIPAA marketing authorisation, tracking-pixel case-law, LGPD Art. 11). Use when reviewing a promotional asset before publication; when authoring claim-substantiation packages; when assessing multi-jurisdiction promotional compliance for a new market entry; when evaluating testimonial or influencer contracts for regulatory exposure; or when preparing for an OCR / Anvisa / regulatory audit of promotional materials.

Healthcare Marketing Compliance Specialist

Apache-2.0ChinaHealthcare

Expert in healthcare marketing compliance in China, proficient in the Advertising Law, Medical Advertisement Management Measures, Drug Administration Law, and related regulations — covering pharmaceuticals, medical devices, medical aesthetics, health supplements, and internet healthcare across content review, risk control, platform rule interpretation, and patient privacy protection, helping enterprises conduct effective health marketing within legal boundaries.

HIPAA Assessor

MITUnited StatesHealthcare

Assess a target system against HIPAA Privacy Rule, Security Rule, and Breach Notification Rule using the hipaa-foundation repository, including entity-role triage, addressable-spec handling, domain selection, evidence mapping, and structured draft output.

HIPAA Breach Notification Rule — 45 CFR §164.400-414

Apache-2.0United StatesHealthcare

Implements HIPAA breach notification requirements under 45 CFR §164.400-414. Covers individual notification within 60 days, HHS reporting thresholds (500+ immediate, under 500 annual), state attorney general notification, media notification for 500+ in a state, and breach risk assessment. Keywords: HIPAA breach notification, HHS reporting, OCR breach portal, individual notice, state attorney general.

HIPAA Business Associate Agreement (BAA)

Apache-2.0United StatesHealthcare

Drafts HIPAA/HITECH-compliant Business Associate Agreements governing PHI/ePHI handling between covered entities and business associates. Covers Privacy Rule and Security Rule obligations, breach notification, subcontractor flow-downs, individual-rights support, and state-law overlays. Use when drafting or updating a BAA, negotiating vendor PHI access, or attaching HIPAA terms to a services agreement. Trigger keywords: BAA, business associate agreement, HIPAA contract, PHI vendor agreement, HITECH breach notice.

HIPAA Business Associate Agreement Management — §164.502(e), §164.504(e)

Apache-2.0United StatesHealthcare

Manages HIPAA Business Associate Agreements under 45 CFR §164.502(e) and §164.504(e). Covers required BAA provisions, business associate vs subcontractor obligations, breach notification chain, downstream BA requirements, and termination remedies. Keywords: BAA, business associate, subcontractor, HIPAA compliance, PHI disclosure, termination.

HIPAA Compliance

MITUnited StatesHealthcare

HIPAA compliance - PHI protection, technical/administrative/physical safeguards, minimum necessary standard, BAA requirements, de-identification, access logging

HIPAA Interoperability — Cures Act, ONC, and CMS Requirements

Apache-2.0United StatesHealthcare

Addresses HIPAA privacy and security requirements for health data interoperability under the 21st Century Cures Act, ONC Health IT Certification Program, and CMS Interoperability and Patient Access Final Rule. Covers information blocking prohibitions, FHIR API patient access, TEFCA exchange purposes, and privacy safeguards for health information exchange. Keywords: interoperability, information blocking, FHIR, TEFCA, Cures Act, patient access API, health information exchange.

HIPAA Privacy Rule — 45 CFR §164.500-534

Apache-2.0United StatesHealthcare

Implements HIPAA Privacy Rule requirements under 45 CFR §164.500-534 for covered entities and business associates. Covers minimum necessary standard, treatment-payment-operations exceptions, directory opt-out, personal representative rules, and authorization requirements. Keywords: HIPAA Privacy Rule, PHI, minimum necessary, TPO, authorization, covered entity.

HIPAA Release Authorization

Apache-2.0United StatesHealthcare

Drafts a HIPAA Release Authorization form compliant with 45 CFR § 164.508 for authorizing disclosure of protected health information. Use when drafting HIPAA authorizations, PHI release forms, medical records releases, or healthcare privacy waivers alongside healthcare powers of attorney or advance directives.

HIPAA Release Authorization

Apache-2.0United StatesHealthcare

Drafts HIPAA Release Authorization forms compliant with 45 CFR 164.508 for disclosure of protected health information. Typically used in estate planning or healthcare decision-making packets. Use when a client needs a HIPAA authorization, medical records release, PHI disclosure consent, healthcare agent access form, or advance directive bundle.

HIPAA Research Privacy — 45 CFR §164.512(i)

Apache-2.0United StatesHealthcare

Implements HIPAA Privacy Rule requirements for research uses of protected health information under 45 CFR §164.512(i). Covers IRB and Privacy Board waivers of authorization, individual authorization for research, limited data set and data use agreements, preparatory to research provisions, and decedent research provisions. Keywords: HIPAA research, IRB waiver, Privacy Board, authorization, limited data set, preparatory research, de-identification, Common Rule.

HIPAA Security Rule Expert

MITUnited StatesHealthcare

HIPAA Security Rule expert for US healthcare compliance. Deep knowledge of 45 CFR Part 164 Subpart C, Administrative/Physical/Technical Safeguards, Required vs Addressable specifications, Risk Analysis, Business Associate Agreements, and HHS OCR enforcement.

HIPAA Security Rule Review

MITUnited StatesHealthcare

Performs a HIPAA Security Rule compliance review against all Administrative, Physical, and Technical Safeguards defined in 45 CFR Part 164, Subpart C. Auto-invoked when discussing healthcare data security, ePHI protection, HIPAA audit readiness, or business associate compliance. Evaluates required and addressable implementation specifications, identifies gaps, and produces a remediation roadmap aligned to HHS enforcement priorities.