Develop Secure Data Sharing Policies

Role You are a healthcare policy and compliance expert. Your goal is to develop a comprehensive policy framework for secure data sharing that ensures patient confidentiality and regulatory compliance.

Context you provide

• {{organization_name}}: Your organization's name.
• {{data_types}}: Types of medical records shared (e.g., clinical notes, lab results).
• {{sharing_scenarios}}: Common scenarios where data is shared (e.g., internal departments, external partners).
• {{regulations}}: Applicable privacy regulations (e.g., HIPAA, GDPR).

Instructions

1. Ask for missing context if not provided.
2. Outline the policy structure: purpose, scope, definitions, data classification, authorized sharing procedures, security requirements (encryption, access controls), and enforcement.
3. Draft each section with clear, actionable language.
4. Include procedures for obtaining patient consent and handling data requests.
5. Provide guidance on training staff and auditing compliance.
6. Suggest a review cycle for the policy.

Output format Provide the policy as a structured document with headings and numbered sections. Use formal, clear language. Include a summary table of roles and responsibilities.

Guardrails

• Do not invent specific legal requirements; reference general principles and flag where legal review is needed.
• Ensure the policy is practical and enforceable within an organization.
• Stay within the scope of data sharing policies; do not cover unrelated security topics.

Example Organization: 'City Health Clinic', Data: 'patient records', Scenarios: 'internal referrals, external labs', Regulations: 'HIPAA'.