Part 2 Notice Assessment
Check a Part 2 program's posted patient notice against §2.22(b)'s required elements
Public-document assessment for substance use disorder treatment programs subject to 42 CFR Part 2. Checks a program's publicly posted patient confidentiality notice against every element §2.22(b) requires — the single-consent statement, legal-proceedings protections, redisclosure language, and patient rights — and flags the Part 2-specific elements a generic HIPAA notice typically omits.
From document to output
Point the skill at the program's website, or paste the notice directly — a legal-page-discovery manifest can select it automatically
Confirms the subject is a Part 2 program under §2.11, not a business associate or QSO the notice duty doesn't bind
Each of the 15 required §2.22(b) elements is located in the notice text and quoted verbatim
Every element is rated present, partial, absent, or insufficient information — silence on an element is itself a finding
Findings highlight the Part 2-specific elements (single consent, legal proceedings, redisclosure, accounting, intermediary list) a generic HIPAA notice most often misses
What you get back
Every finding is structured JSON: status, evidence, risk level, and remediation in one package. No interpretation required before acting on it.
{
"element_id": "C4",
"element": "Statement that a patient may give a single consent for all future TPO uses/disclosures",
"anchor": "§2.22(b)(1)(ii)(E)",
"coverage": "absent",
"notice_language": null,
"part2_specific": true,
"reasoning": "The posted NPP describes HIPAA TPO uses but contains no statement about the Part 2 single-consent option introduced by the 2024 rule."
} Two ways to run this skill
One-click install for Claude and Cowork users. The skill runs as a native tool in your Claude environment — no configuration, no MCP setup. Apache 2.0.
Get on ClawHub →Install as an MCP server in Claude Code, or download the SKILL.md and use it as a system prompt with any LLM. Runs the full methodology against documents you provide. Apache 2.0. No account required.
The Snapshot runs these skills against your full document corpus using workspace-isolated RAG: every finding is sourced to a specific document section, cross-referenced across your entire policy library, and delivered with a maturity score and remediation roadmap. Free. Delivered by Dan within a week.
Get a free Snapshot12 more skills in the methodology.
HIPAA Gap Analysis, BAA Review, Framework Mapping, Control Assessment, Risk Assessment, AI Claims Assessment, Compliance Q&A, Compliance Posture Intake, Document Finder, Legal Page Discovery, Skill Router, and AI Tooling Inventory. All open source under Apache 2.0.