01
Contain and preserve
Don't destroy evidence.
Made for Dentists
Run the First 24 Hours After a Suspected HIPAA Breach
Also useful for: Medical Assistants, Nurses, Nurse Practitioners, Paramedics, Physicians, Registered Nurses, Therapists, people in Healthcare
35 min
Intermediate
Healthcare
Dentist
Career outcome:
Avoid Professional Risk
Stop the bleeding first. Panic emails second never.
We'll use them to write your prompt.
Completed ✓
Make Your Play
Give us the situation. We’ll build the prompt.
Early hours determine whether an incident is containable.
Your answers save as you type.
What you'll do
This is the plan inside your prompt. Add your details first. Then follow these steps with ChatGPT or Claude.
02
Build the incident log
Facts, not theories.
03
Notify in the right order
Privacy officer before the group chat.
04
Plan the next 24 hours
Assume breach until risk assessment.
Make Your Play
Run the First 24 Hours After a Suspected HIPAA Breach
Tell us what the prompt needs to know
Start with the questions below. Each answer personalizes the playbook and builds the prompt you’ll use at the end.
Your situation
Discovery time, who found it, what PHI may be involved.
0/10000
Devices, apps, accounts, paper records.
0/10000
Privacy officer, IT ticket, hotline.
Remote wipe, password reset, retrieval attempts.
This playbook was updated. Review your inputs before copying.
What you'll do
Check a step when you finish it.
01
Contain and preserve
Don't destroy evidence.
02
Build the incident log
Facts, not theories.
03
Notify in the right order
Privacy officer before the group chat.
04
Plan the next 24 hours
Assume breach until risk assessment.
Fill in the fields above to generate your prompt preview.
Assembled prompt
Beginner instructions
Fill the fields with this week’s real details. Incomplete notes beat invented polish.
Run the assembled prompt, answer follow-ups with specifics, then copy the deliverable into your own doc and verify names and numbers.
Advanced instructions
Add constraints the model can’t see: politics, licensing, cash timing, union rules, or family bandwidth.
After the first pass, ask it to attack the weakest assumption in the draft.
Use this when
A laptop is missing, a fax went to the wrong number, or a portal message went to the wrong patient.
You'll need
- What happened and when
- Systems and data involved
- Your org's reporting path
- Immediate containment already done
You'll get
- A a 24-hour checklist: contain, document, notify chain, and preserve evidence you can use without rewriting it from scratch.
By the end of this playbook
You will have:
- A a 24-hour checklist: contain, document, notify chain, and preserve evidence you can use without rewriting it from scratch.
Examples
Progress 1 of 4