Healthcare legal-AI skills in 🇺🇸 United States

31 legal AI skills for healthcare in United States.

Chart Audit Protocol

Apache-2.0United StatesHealthcare

Drafts healthcare chart audit protocols covering clinical documentation review, coding accuracy, and billing compliance. Aligns with Medicare CoPs, OIG Compliance Program Guidance, RAC preparedness, federal sentencing guidelines, and the 60-day overpayment rule. Use when drafting routine periodic audits, targeted risk reviews, proactive compliance measures, or post-regulatory-update assessments.

Corporate Practice of Medicine Compliance

Apache-2.0United StatesHealthcare

Drafts Corporate Practice of Medicine (CPOM) compliance structure documents for healthcare entities. Covers compliant organizational models (PC/PA, MSO, friendly PC), MSA architecture, operational compliance checklists, and state-specific regulatory analysis. Use when structuring healthcare operations, reviewing CPOM compliance, drafting MSO/MSA arrangements, or advising on physician practice ownership in CPOM-restricted jurisdictions.

Corrective Action Plan for Healthcare Deficiencies

Apache-2.0United StatesHealthcare

Drafts a regulator-ready Corrective Action Plan (CAP) for U.S. healthcare facilities responding to inspection, survey, or audit deficiencies. Covers root-cause analysis, remediation steps, accountability, milestones, monitoring, and validation. Trigger when the user mentions CAP, plan of correction, deficiency citation, scope/severity remediation, correction timeline, or sustainability monitoring for CMS, state, or Joint Commission findings.

Corrective Action Plan (Healthcare)

Apache-2.0United StatesHealthcare

Drafts U.S. healthcare corrective action plans (CAPs / plans of correction) responding to survey deficiencies, audits, or inspections. Produces deficiency statements, root cause analysis, corrective actions, accountability assignments, timelines, monitoring, and validation aligned to CMS, Joint Commission, and state health department standards. Triggers on CAP, plan of correction, statement of deficiencies, survey findings, accreditation response, regulatory remediation, QAPI corrective action.

Executing HIPAA Breach Notification

Apache-2.0United StatesHealthcare

Executes breach notification under HIPAA Breach Notification Rule (45 CFR 164.400-414). Covers 60-day individual notification, HHS/OCR reporting for breaches of 500+ individuals (immediate) and under 500 (annual log), state attorney general notification, media notification for 500+ in a single state, and breach risk assessment using the four-factor test. Keywords: HIPAA, breach notification, PHI, HHS, OCR, covered entity, business associate.

Healthcare Corrective Action Plan

Apache-2.0United StatesHealthcare

Drafts healthcare Corrective Action Plans (CAPs) responding to CMS survey deficiencies, Joint Commission findings, state inspection citations, or internal audit results. Structures root cause analysis, remediation steps, accountability, timelines, and monitoring. Use when drafting plans of correction, responding to immediate jeopardy findings, condition-level citations, or standard-level deficiencies.

HIPAA Assessor

MITUnited StatesHealthcare

Assess a target system against HIPAA Privacy Rule, Security Rule, and Breach Notification Rule using the hipaa-foundation repository, including entity-role triage, addressable-spec handling, domain selection, evidence mapping, and structured draft output.

HIPAA Breach Notification Rule — 45 CFR §164.400-414

Apache-2.0United StatesHealthcare

Implements HIPAA breach notification requirements under 45 CFR §164.400-414. Covers individual notification within 60 days, HHS reporting thresholds (500+ immediate, under 500 annual), state attorney general notification, media notification for 500+ in a state, and breach risk assessment. Keywords: HIPAA breach notification, HHS reporting, OCR breach portal, individual notice, state attorney general.

HIPAA Business Associate Agreement (BAA)

Apache-2.0United StatesHealthcare

Drafts HIPAA/HITECH-compliant Business Associate Agreements governing PHI/ePHI handling between covered entities and business associates. Covers Privacy Rule and Security Rule obligations, breach notification, subcontractor flow-downs, individual-rights support, and state-law overlays. Use when drafting or updating a BAA, negotiating vendor PHI access, or attaching HIPAA terms to a services agreement. Trigger keywords: BAA, business associate agreement, HIPAA contract, PHI vendor agreement, HITECH breach notice.

HIPAA Business Associate Agreement Management — §164.502(e), §164.504(e)

Apache-2.0United StatesHealthcare

Manages HIPAA Business Associate Agreements under 45 CFR §164.502(e) and §164.504(e). Covers required BAA provisions, business associate vs subcontractor obligations, breach notification chain, downstream BA requirements, and termination remedies. Keywords: BAA, business associate, subcontractor, HIPAA compliance, PHI disclosure, termination.

HIPAA Compliance

MITUnited StatesHealthcare

HIPAA compliance - PHI protection, technical/administrative/physical safeguards, minimum necessary standard, BAA requirements, de-identification, access logging

HIPAA Interoperability — Cures Act, ONC, and CMS Requirements

Apache-2.0United StatesHealthcare

Addresses HIPAA privacy and security requirements for health data interoperability under the 21st Century Cures Act, ONC Health IT Certification Program, and CMS Interoperability and Patient Access Final Rule. Covers information blocking prohibitions, FHIR API patient access, TEFCA exchange purposes, and privacy safeguards for health information exchange. Keywords: interoperability, information blocking, FHIR, TEFCA, Cures Act, patient access API, health information exchange.

HIPAA Privacy Rule — 45 CFR §164.500-534

Apache-2.0United StatesHealthcare

Implements HIPAA Privacy Rule requirements under 45 CFR §164.500-534 for covered entities and business associates. Covers minimum necessary standard, treatment-payment-operations exceptions, directory opt-out, personal representative rules, and authorization requirements. Keywords: HIPAA Privacy Rule, PHI, minimum necessary, TPO, authorization, covered entity.

HIPAA Release Authorization

Apache-2.0United StatesHealthcare

Drafts a HIPAA Release Authorization form compliant with 45 CFR § 164.508 for authorizing disclosure of protected health information. Use when drafting HIPAA authorizations, PHI release forms, medical records releases, or healthcare privacy waivers alongside healthcare powers of attorney or advance directives.

HIPAA Release Authorization

Apache-2.0United StatesHealthcare

Drafts HIPAA Release Authorization forms compliant with 45 CFR 164.508 for disclosure of protected health information. Typically used in estate planning or healthcare decision-making packets. Use when a client needs a HIPAA authorization, medical records release, PHI disclosure consent, healthcare agent access form, or advance directive bundle.

HIPAA Research Privacy — 45 CFR §164.512(i)

Apache-2.0United StatesHealthcare

Implements HIPAA Privacy Rule requirements for research uses of protected health information under 45 CFR §164.512(i). Covers IRB and Privacy Board waivers of authorization, individual authorization for research, limited data set and data use agreements, preparatory to research provisions, and decedent research provisions. Keywords: HIPAA research, IRB waiver, Privacy Board, authorization, limited data set, preparatory research, de-identification, Common Rule.

HIPAA Security Rule Expert

MITUnited StatesHealthcare

HIPAA Security Rule expert for US healthcare compliance. Deep knowledge of 45 CFR Part 164 Subpart C, Administrative/Physical/Technical Safeguards, Required vs Addressable specifications, Risk Analysis, Business Associate Agreements, and HHS OCR enforcement.

HIPAA Security Rule Review

MITUnited StatesHealthcare

Performs a HIPAA Security Rule compliance review against all Administrative, Physical, and Technical Safeguards defined in 45 CFR Part 164, Subpart C. Auto-invoked when discussing healthcare data security, ePHI protection, HIPAA audit readiness, or business associate compliance. Evaluates required and addressable implementation specifications, identifies gaps, and produces a remediation roadmap aligned to HHS enforcement priorities.

HIPAA Security Rule — Technical Safeguards 45 CFR §164.312

Apache-2.0United StatesHealthcare

Implements HIPAA Security Rule technical safeguards under 45 CFR §164.312 for electronic protected health information. Covers access controls with unique user identification, emergency access procedures, automatic logoff, encryption, audit controls, integrity controls, and transmission security. Keywords: HIPAA Security Rule, ePHI, access controls, encryption, audit controls, technical safeguards.

HITECH Act Privacy and Security Requirements

Apache-2.0United StatesHealthcare

Implements HITECH Act privacy and security requirements including breach notification expansion, four-tier penalty structure, state attorney general enforcement authority, EHR meaningful use privacy conditions, and business associate direct liability. Keywords: HITECH Act, breach notification, penalty tiers, state AG enforcement, meaningful use, EHR privacy.

Incident-To Billing Policy

Apache-2.0United StatesHealthcare

Drafts Medicare incident-to billing compliance policies for healthcare practices. Covers eligibility criteria, direct supervision, documentation standards, audit programs, and FCA risk mitigation under 42 CFR 410.26, Medicare Benefit Policy Manual Ch. 15 §60.1, and 42 U.S.C. §1395x(s)(2)(A). Use when creating or updating incident-to policies, responding to OIG scrutiny, or establishing NPP billing compliance programs.

Informed Consent Form

Apache-2.0United StatesHealthcare

Drafts regulatory-compliant informed consent forms for healthcare procedures, clinical trials, research participation, or professional services. Incorporates HIPAA, FDA, IRB/Common Rule, and ICH-GCP requirements as applicable. Use when drafting surgical consent, research participant agreements, clinical trial consent, or treatment authorization forms.

Managed Care Contract

Apache-2.0United StatesHealthcare

Drafts managed care contracts between MCOs and healthcare providers covering payment methodology (FFS/capitation), credentialing, utilization management, HIPAA compliance, quality assurance (HEDIS/CAHPS), termination, indemnification, and dispute resolution. Ensures compliance with Anti-Kickback Statute, Stark Law, CMS MA/Medicaid guidelines, state insurance laws, and NCQA/URAC standards. Use when establishing provider networks, onboarding providers, updating managed care agreements, or negotiating MCO-provider contracts.

Medical Director Agreement

Apache-2.0United StatesHealthcare

Drafts a Medical Director Agreement between a healthcare organization and a physician, structured for Anti-Kickback Statute and Stark Law safe harbor compliance. Covers appointment, duties, FMV compensation, independent contractor status, restrictive covenants, HIPAA obligations, and regulatory safeguards for hospitals, ASCs, SNFs, and other facilities. Use when drafting medical director contracts, physician administrative services agreements, or healthcare leadership engagement letters.