Does it address both paper PHI and ePHI?

Yes, the skill includes safeguards for both physical Protected Health Information and Electronic PHI (ePHI) as required by the Security Rule.

How does the skill handle PHI destruction after termination?

It provides clauses for the return or destruction of PHI, including certification of destruction and protocols for when returning data is deemed infeasible.

Does this skill include HITECH requirements?

Yes, it covers both HIPAA and HITECH obligations, including specific breach notification timelines and subcontractor flow-down requirements.

Can I use this for state-specific privacy laws?

The skill provides guidelines for state-law overlays, ensuring that more restrictive state breach-notification deadlines take precedence over federal minimums.

HIPAA BAA Agreement Drafter

Name: HIPAA BAA Agreement Drafter
Author: lev-os

bylev-os

•

Seguridad y Pruebas

Drafts HIPAA and HITECH-compliant Business Associate Agreements to govern PHI and ePHI handling between parties.

This skill provides specialized guidance for drafting, negotiating, and updating Business Associate Agreements (BAAs) required under HIPAA and HITECH regulations. It ensures that contracts include essential Privacy and Security Rule obligations, breach notification requirements, subcontractor flow-downs, and individual rights support. It is an essential tool for legal professionals, compliance officers, and developers who need to ensure regulatory alignment when integrating third-party services that handle protected health information (PHI).

Características Principales

01Detailed definitions for PHI, ePHI, and Security Incidents with statutory citations

02Comprehensive breach and incident notification framework implementation

03Subcontractor flow-down and individual rights (Access/Amendment) support

04Troubleshooting for state-law overlaps and infeasible PHI disposition

05Standardized BAA output structure with mandatory regulatory clauses

062 GitHub stars

Casos de Uso

01Drafting a new BAA for a vendor accessing patient records or healthcare data

02Negotiating security safeguards and risk allocation for vendor PHI access

03Updating legacy contracts to meet modern HITECH breach notification standards

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add lev-os/agents hipaa-baa

For use in Claude.ai and ChatGPT