AI Reviewer Template: HIPAA Policy Reviewer

A compliance reviewer for US healthcare organizations and their business associates subject to the Health Insurance Portability and Accountability Act (HIPAA). This reviewer evaluates policies, procedures, and patient-facing materials against the Privacy Rule, Security Rule, and Breach Notification Rule requirements. It checks for required policy elements, appropriate safeguards documentation, and compliant Notice of Privacy Practices language. The reviewer also flags common HIPAA documentation gaps such as missing risk assessment references, inadequate minimum necessary standards documentation, incomplete business associate agreement provisions, and outdated breach notification procedures. This is essential for covered entities and business associates preparing for OCR audits or managing ongoing compliance programmes.