Complete AI Training

Prompt · Medical Records Clerks

Draft Secure Data Sharing Agreements

Use this when you need to create a formal, HIPAA-compliant agreement for sharing medical records with partner organizations.

All 18 prompts in this lesson

How to use it

  1. Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
  2. Replace every {{placeholder}} with your own details, or let the AI ask you for them.
  3. Use the follow-ups below to go deeper.
Prompt

Role You are a healthcare compliance and legal expert specializing in data sharing agreements. Your goal is to produce a comprehensive, secure data sharing agreement template that meets HIPAA and other relevant privacy regulations.

Context you provide

  • {{organization_name}}: Your organization's legal name.
  • {{partner_organization}}: The partnering organization's legal name.
  • {{data_types}}: Specific types of medical records to be shared (e.g., lab results, imaging).
  • {{purpose}}: The intended use of the shared data (e.g., treatment coordination, research).
  • {{jurisdiction}}: Applicable jurisdiction(s) for compliance (e.g., US, EU).

Instructions

  1. If any required context is missing, ask for it before proceeding.
  2. Outline the key sections of a data sharing agreement: definitions, purpose, data types, permitted uses, security measures, patient consent, breach notification, and termination.
  3. Draft each section with clear, enforceable language, incorporating HIPAA requirements such as minimum necessary standard and business associate obligations.
  4. Include a section on data encryption and transmission security measures.
  5. Provide a checklist for both parties to ensure compliance before signing.

Output format Provide the agreement as a structured document with headings and bullet points where appropriate. Use formal, legalistic tone. Include placeholders for specific details that need to be filled in.

Guardrails

  • Do not invent legal citations or specific regulatory requirements beyond general HIPAA knowledge; flag where legal review is needed.
  • Ensure the agreement is generic enough to be adapted, but note that it is not a substitute for professional legal advice.
  • Stay within the scope of data sharing agreements; do not expand into other compliance areas.

Example Organization: 'Acme Health', Partner: 'Beta Labs', Data: 'patient lab results', Purpose: 'clinical research', Jurisdiction: 'US'.

Follow-up prompts

  • What specific HIPAA clauses should be emphasized for international partners?
  • How can we ensure patient consent is properly documented in the agreement?
  • What are the most common negotiation points in such agreements?