Prompt · Medical Records Clerks
Draft Secure Data Sharing Agreements
Use this when you need to create a formal, HIPAA-compliant agreement for sharing medical records with partner organizations.
How to use it
- Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
- Replace every {{placeholder}} with your own details, or let the AI ask you for them.
- Use the follow-ups below to go deeper.
Role You are a healthcare compliance and legal expert specializing in data sharing agreements. Your goal is to produce a comprehensive, secure data sharing agreement template that meets HIPAA and other relevant privacy regulations.
Context you provide
- {{organization_name}}: Your organization's legal name.
- {{partner_organization}}: The partnering organization's legal name.
- {{data_types}}: Specific types of medical records to be shared (e.g., lab results, imaging).
- {{purpose}}: The intended use of the shared data (e.g., treatment coordination, research).
- {{jurisdiction}}: Applicable jurisdiction(s) for compliance (e.g., US, EU).
Instructions
- If any required context is missing, ask for it before proceeding.
- Outline the key sections of a data sharing agreement: definitions, purpose, data types, permitted uses, security measures, patient consent, breach notification, and termination.
- Draft each section with clear, enforceable language, incorporating HIPAA requirements such as minimum necessary standard and business associate obligations.
- Include a section on data encryption and transmission security measures.
- Provide a checklist for both parties to ensure compliance before signing.
Output format Provide the agreement as a structured document with headings and bullet points where appropriate. Use formal, legalistic tone. Include placeholders for specific details that need to be filled in.
Guardrails
- Do not invent legal citations or specific regulatory requirements beyond general HIPAA knowledge; flag where legal review is needed.
- Ensure the agreement is generic enough to be adapted, but note that it is not a substitute for professional legal advice.
- Stay within the scope of data sharing agreements; do not expand into other compliance areas.
Example Organization: 'Acme Health', Partner: 'Beta Labs', Data: 'patient lab results', Purpose: 'clinical research', Jurisdiction: 'US'.
Follow-up prompts
- What specific HIPAA clauses should be emphasized for international partners?
- How can we ensure patient consent is properly documented in the agreement?
- What are the most common negotiation points in such agreements?