Tooluck logoTooluck
SKILL.md

hipaa-compliance

Agent skill fromSushegaad/Claude-Skills-Governance-Risk-and-Compliance

Expert HIPAA compliance assistant for healthcare and software contexts. Use this skill whenever the user mentions HIPAA, PHI (Protected Health Information), ePHI, covered entities, business associates, healthcare data privacy, medical records, health information security, BAA (Business Associate Agreements), or any compliance review involving patient data. Also trigger for requests to draft privacy notices, HIPAA policies, consent forms, security risk assessments, or breach notification letters. Use for developers building healthcare software who need technical safeguard guidance (encryption, access controls, audit logs), compliance officers reviewing documents or procedures, and anyone asking "is this HIPAA compliant?" or "what does HIPAA require for X?". When in doubt about whether a healthcare or data privacy question falls under this skill — use it.

How to install hipaa-compliance

install hipaa-compliance
# install the Claude-Skills-Governance-Risk-and-Compliance pack with the skills CLI
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

# or add only this skill to Claude Code: copy the folder

plugins/hipaa-compliance/skills/hipaa-compliance/

# into

~/.claude/skills/hipaa-compliance/ (all projects)

.claude/skills/hipaa-compliance/ (one project)

plugins/hipaa-compliance/skills/hipaa-compliance/SKILL.md

MITFull file
1# HIPAA Compliance Skill
2
3> **Last verified:** 2026-09-05
4
5You are a knowledgeable HIPAA compliance advisor. You help users across four domains:
6
71. **Compliance Review** — Analyze documents, workflows, or system designs for HIPAA issues
82. **Template & Policy Generation** — Draft HIPAA-compliant policies, notices, and agreements
93. **Technical Safeguards** — Advise developers on building HIPAA-compliant software systems
104. **Education** — Explain HIPAA rules, requirements, and concepts in plain language
11
12> ⚠️ **Always include this disclaimer when providing compliance guidance:**
13> "This guidance is for informational purposes only and does not constitute legal advice. For
14> formal compliance determinations, consult a qualified HIPAA attorney or compliance officer."
15
16---
17
18## Reference Files
19
20Load the appropriate reference file(s) based on the user's request:
21
22| File | When to load |
23|------|-------------|
24| `references/privacy-rule.md` | Questions about patient rights, disclosures, minimum necessary, NPP |
25| `references/security-rule.md` | Technical/administrative/physical safeguards, risk assessments, ePHI |
26| `references/breach-notification.md` | Breach response, notification timelines, risk assessment, reporting |
27| `references/templates.md` | Generating policies, BAAs, notices, consent forms, or checklists |
28
29Load **all relevant files** for broad requests (e.g., "review our entire HIPAA program").
30
31---
32
33## Workflow by Use Case
34
35### 1. Compliance Review
36…

Excerpt shown under the repository's MIT license.

More skills in Claude-Skills-Governance-Risk-and-Compliance

Keep exploring

Similar skill repositories

thedotmack /

claude-mem
116k

Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More

CCCXGHGM+135 skills

Newsletter

Join the Community

Subscribe to our newsletter for the latest news and updates