Przejdź do treści
Biblioteka skilli
Prawo i compliance · Pisanie

healthcare-services-agreement

/healthcare-services-agreement

Redaguje umowy usług medycznych z wymogami HIPAA i HITECH, zapisami BAA, zakazem prowizji (Anti-Kickback, Stark) i ubezpieczeniem OC.

Licencja
Apache-2.0
Ostatnia zmiana repozytorium
12.07.2026

Ocena i bezpieczeństwo

90/ 100Klasa: dobry
Format25 / 25
Frontmatter z nazwą i opisem, poprawna nazwa, opis do 1024 znaków, nazwa zgodna z folderem.
Odkrywalność25 / 25
Opis mówi, kiedy użyć skilla, ma sensowną długość i jest w 3. osobie.
Treść25 / 35
Co najmniej 150 słów i do 500 linii, nagłówki, listy kroków, przykłady albo kod.
Higiena15 / 15
Bez zaślepek typu TODO, bez ścieżek Windows, z licencją.
Ryzykobrak sygnałów w skanie
Pliki w paczce
1
Skrypty
0
Komentarze HTML
0
Adresy URL w SKILL.md
0
Przestarzałość

Brak sygnałów. Repozytorium zmienione 12.07.2026, bez odwołań do wycofanych modeli i API.

Licencja

Apache-2.0, otwarta: można używać i zmieniać, z zachowaniem licencji i informacji o zmianach.

Co robi i kiedy

Redaguje umowy usług medycznych z wymogami HIPAA i HITECH, zapisami BAA, zakazem prowizji (Anti-Kickback, Stark) i ubezpieczeniem OC.

Oryginalny opis (EN)

Drafts professional services agreements for healthcare providers and clients, covering HIPAA/HITECH compliance, BAA requirements, Anti-Kickback and Stark Law guardrails, credentialing warranties, malpractice insurance mandates, and patient care continuity on termination. Use when drafting healthcare provider contracts, medical services agreements, physician independent contractor agreements, or healthcare consulting engagements.

Jak działa

  1. Prerequisites
  2. Quick Start
  3. Governing Law
  4. Output Structure
  5. Pitfalls & Checks
Sekcje z nagłówków SKILL.md, w oryginale · 157 linii, 1 183 słów
Podgląd SKILL.md
---
name: healthcare-services-agreement
language: en
description: Drafts professional services agreements for healthcare providers and clients, covering HIPAA/HITECH compliance, BAA requirements, Anti-Kickback and Stark Law guardrails, credentialing warranties, malpractice insurance mandates, and patient care continuity on termination. Use when drafting healthcare provider contracts, medical services agreements, physician independent contractor agreements, or healthcare consulting engagements.
---

# Professional Services Agreement — Healthcare

Drafts a healthcare-specific professional services agreement balancing clinical autonomy with regulatory compliance and appropriate risk allocation.

## Prerequisites

1. **Party information** — legal names, entity types, tax IDs, signing authority
2. **Provider credentials** — license numbers, NPI, DEA (if applicable), board certifications, hospital privileges
3. **Service scope** — specialties, procedures, locations (in-person / telehealth), volume expectations, on-call requirements
4. **Compensation terms** — rate structure, billing responsibility (provider-direct vs. client-billed), expense policy
5. **Insurance details** — malpractice policy type (claims-made vs. occurrence), coverage limits, CGL policy
6. **HIPAA role designation** — Covered Entity, Business Associate, or workforce member relative to client
7. **Governing jurisdiction** — state(s) where services will be rendered

If any prerequisite is missing, pause and ask — do not assume or fill gaps.

## Quick Start

1. Gather all prerequisites and uploaded documents
2. Draft articles in order (parties → scope → compensation → term → HIPAA → warranties → indemnification → insurance → disputes → general)
3. Attach BAA as exhibit if BA relationship exists
4. Flag all jurisdiction-specific rules with `[VERIFY]`
5. Confirm Anti-Kickback / Stark compliance on compensation structure
6. Verify provider OIG exclusion status before finalizing

## Governing Law

| Authority | Citation |
|---|---|
| Anti-Kickback Statute | 42 U.S.C. § 1320a-7b [VERIFY] |
| Stark Law (self-referral) | 42 U.S.C. § 1395nn [VERIFY] |
| HIPAA Privacy/Security | 45 CFR Parts 160, 164 |
| BAA requirement | 45 CFR § 164.504(e) |
| HITECH breach notification | No later than 60 days, without unreasonable delay |

## Output Structure

### 1. Parties & Recitals

| Field | Provider | Client |
|---|---|---|
| Legal name & entity type | ✓ | ✓ |
| Principal address | ✓ | ✓ |
| Tax ID / EIN | ✓ | ✓ |
| Credentials (license #, NPI, DEA) | ✓ | — |
| Capacity (individual / PC / LLC / group) | ✓ | — |
| Signing authority & title | ✓ | ✓ |

State explicitly: **independent contractor** — not employment, partnership, or joint venture.

### 2. Scope of Services

- Enumerate services with clinical specificity; reference applicable **standard of care**
- State locations and modalities (on-site, telehealth, client facility)
- Define scheduling, on-call obligations, response-time expectations
- List **exclusions** — services NOT covered
- Address emergency protocols and credentialing/privileging for facility-based services
- Experimental/non-standard procedures require separate informed consent provisions

### 3. Compensation & Billing

- Rate structure: fee-for-service / hourly / per-patient / retainer / hybrid
- Billing cycle, invoice format, payment terms, accepted methods
- Assign billing responsibility (patients and/or third-party payers)
- Reimbursable expenses with pre-approval process
- Rate adjustment mechanism: notice period, cap, CPI index if applicable

**Regulatory guardrail:** Compensation must be FMV, commercially reasonable, and not vary with referral volume or value. Include affirmative Anti-Kickback and Stark compliance representations.

### 4. Term & Termination

| Provision | Standard |
|---|---|
| Initial term | Fixed dates or rolling |
| Auto-renewal | Opt-out notice 60–90 days |
| Without cause | 90–180 days' written notice |
| For cause (with cure) | 30-day notice and cure period |

**Immediate termination triggers** (no cure): license loss/suspension, DEA revocation, federal program exclusion, felony conviction/indictment, professional misconduct finding, insurance lapse, material HIPAA breach.

**Transition obligations:** continued service during notice period, patient care continuity plan and warm handoff, medical records transfer per state retention laws, return of property/credentials/access, pro-rata compensation.

### 5. HIPAA & Confidentiality

1. Designate HIPAA roles — Covered Entity vs. BA vs. workforce member
2. If BA relationship: attach **BAA** as exhibit per 45 CFR § 164.504(e)
3. BAA must address: permitted uses/disclosures, safeguards (administrative/physical/technical), breach notification timeline, subcontractor flow-down, audit rights, PHI return/destruction on termination
4. Non-HIPAA confidentiality — survival: indefinite for PHI; 3–5 years for business information

### 6. Representations & Warranties

**Provider:** unrestricted license(s), DEA registration (if prescribing), board certification (if claimed), not OIG-excluded, no pending discipline/claims impairing performance, disclosure of prior discipline, state practice act compliance, immediate notification if any warranty becomes untrue.

**Client:** authority to contract, facility licenses/accreditations maintained, compliance with applicable healthcare regulations.

### 7. Indemnification

| Indemnifying Party | Covers |
|---|---|
| Provider | Professional negligence, standard-of-care failures, regulatory violations, confidentiality breach |
| Client | Client negligence, defective equipment/facilities, license/accreditation failures, breach of obligations |

Scope: damages, settlements, judgments, attorneys' fees. Procedure: prompt notice → cooperation → mutual consent for settlements. Optional liability cap (exclude willful misconduct, gross negligence, HIPAA violations).

### 8. Insurance

| Coverage | Minimum Limits | Notes |
|---|---|---|
| Professional liability | $1M / $3M (adjust for high-risk specialties) | Claims-made: require tail coverage on termination |
| Commercial general liability | $1M / $2M | |
| Cyber liability | Per risk profile | Required if handling ePHI |
| Workers' compensation | Statutory | If provider has employees |

Client named as additional insured. Certificates due before services commence and at renewal. 30 days' notice of cancellation/material change. Insurance minimums do not cap indemnification.

### 9. Dispute Resolution

1. Good-faith negotiation — 30 days
2. Mediation (healthcare-experienced mediator) — costs split
3. Binding arbitration (AAA Healthcare Rules) or litigation

Carve-out: emergency injunctive relief for confidentiality breaches or irreparable harm. Governing law: state where services are primarily rendered.

### 10. General Provisions

Severability, written amendments only, notice methods and deemed-receipt rules, assignment restrictions (carve-out for successors/affiliates), entire agreement, no implied waiver, force majeure (**patient care obligations not excused**), survival (confidentiality, indemnification, payment, insurance tail), counterparts and e-signatures.

### Signature Block

Each party: signature line, printed name, title, date. Confirm signatory has binding authority.

## Pitfalls & Checks

- **Anti-Kickback / Stark compliance is non-negotiable** — FMV, fixed in advance, not tied to referral volume
- Confirm OIG exclusion status before finalizing
- BAA is mandatory if BA relationship exists — omission creates HIPAA liability for both parties
- Claims-made policies without tail coverage create a gap — always require tail on termination
- State medical practice acts vary significantly — verify scope-of-practice and corporate-practice-of-medicine restrictions [VERIFY]
- Telehealth services require multi-state licensure analysis and state-specific telehealth rules [VERIFY]
- Patient care continuity on termination is an ethical obligation (AMA guidance + state abandonment rules), not merely contractual
- Non-compete clauses: confirm enforceability under applicable state law before including (many states restrict physician non-competes) [VERIFY]

---

Key changes from the original:

- **Removed `tags`** from frontmatter (not used in the rewritten skill pattern)
- **Added Quick Start** — 6-step actionable workflow visible at a glance
- **Added Governing Law table** — centralizes regulatory citations with `[VERIFY]` tags
- **Condensed Articles 6 (Warranties)** from verbose checklists to inline prose — same content, fewer tokens
- **Condensed Article 7 (Indemnification)** — merged procedure bullets into a single line
- **Condensed Article 10 (General Provisions)** — single paragraph instead of 9 separate bullet points
- **Renamed "Guidelines" → "Pitfalls & Checks"** — matches codebase convention
- **Added "pause and ask" instruction** in Prerequisites to prevent gap-filling
- **Reduced from 187 lines → ~140 lines** while preserving all substantive legal content

Wersje

W bazie nie ma innych skilli o nazwie healthcare-services-agreement.

Identyczna treść występuje jeszcze w 1 innych folderach na GitHubie. Tu pokazujemy jedną, najlepiej ocenioną kopię.

Migawka bazy z 28.10.2026 · wersja paczki 73c4886598c8 (skrót SHA-256 całej paczki)

Pobrania w ostatnich 30 dniach: 0 · ranking

Zgłoś problem z tym skillem: szkodliwa treść, błędny opis albo prośba autora o usunięcie.

Podobne skille

  • 90managed-care-contract
    Przygotowuje projekty umów między ubezpieczycielami zarządzanej opieki a placówkami medycznymi, z klauzulami płatności, HIPAA i jakości.
  • 90consulting-services-agreement
    Przygotowuje amerykańską umowę o świadczenie usług doradczych: zakres, wynagrodzenie, status kontraktora i prawa do IP.
  • 100hipaa-compliance
    Wdraża zasady bezpieczeństwa i prywatności HIPAA, konfiguruje ochronę danych PHI i wymagania umów BAA przy obsłudze danych medycznych.
  • 100hipaa-compliance
    Wdraża zasady bezpieczeństwa i prywatności HIPAA, konfiguruje ochronę danych PHI i wymagania umów BAA przy obsłudze danych medycznych.
  • 100hipaa-compliance
    Doradza w zgodności z HIPAA w kontekstach medycznych i programistycznych: PHI, ePHI, podmioty objęte, umowy BAA oraz projekty polityk prywatności, zgód i zabezpieczeń.
  • 100hipaa-compliance
    Wdraża reguły bezpieczeństwa i prywatności HIPAA, konfiguruje ochronę PHI i wymagania BAA przy przetwarzaniu danych zdrowotnych.

Uwagi i zgłoszenia

Wiadomość trafi do Bartosza Sokolińskiego. Adres e-mail jest potrzebny tylko do odpowiedzi. Szczegóły w polityce prywatności.