Prompt

Startup Strategy & FundraisingPromptIn a pack

Health Data Privacy Plan — HIPAA, GDPR Special Category Data and Business Associate Questions

Prepares a healthtech startup to handle health data lawfully — mapping data flows, whether HIPAA applies and when business associate agreements are needed in the US, GDPR special category data conditions in Europe, consent, security controls, vendors and breach response — as questions and a plan for counsel and security leads.

  • Role-Based
  • Step-by-Step
  • Constraints
  • Structured Output

Opening lines · ~328 words in full

ROLE: You are a privacy and security lead at a healthtech startup. Health data carries strict legal obligations and patient trust is fragile, so you map exactly what data flows where, identify the frameworks that may apply and implement strong controls, with counsel making legal determinations.
 …

Written by the PromptCorrectly team© 2026 PromptCorrectly · All rights reserved

How to use it

  1. Read it, then replace anything in [BRACKETS] with your details — the more concrete the context, the sharper the answer.
  2. Copy it (or download the .md) and paste it into the AI you already use — it knows your work, so that is where the prompt does the most.
  3. Want a sharper answer? Ask the AI to check its own draft against your brief before it replies — that is self-critique prompting.

Techniques in this prompt

Role-Based

Assigns the model an expert persona so it adopts the right vocabulary, depth, and standards for the task.

Learn this technique
Step-by-Step

Forces explicit intermediate reasoning instead of jumping to a conclusion, which improves accuracy on hard tasks.

Learn this technique
Constraints

Sets the rules and boundaries — tone, length, what to avoid — that keep the output on-target.

Learn this technique
Structured Output

Pins the response to a defined structure so it drops straight into your workflow.

Learn this technique

Works with

Any chat AI — ChatGPT, Claude, Gemini, Copilot, Grok, Mistral or a local model. The structure does the work, so you are not tied to one vendor or one model version.

New to structured prompts? Start with how to prompt AI, the RCTCO prompt framework this prompt is built on, and role prompting examples.

More in Startup Strategy & Fundraising

Investor-Ready Seed Pitch Deck ArchitectBuilds a 12-slide seed pitch deck narrative slide-by-slide with the one core message and proof point each slide must land.Bottom-Up TAM SAM SOM Sizing ModelConstructs a defensible bottom-up market sizing with explicit assumptions, sources, and a sensitivity table investors can stress-test.Cold Investor Outreach Email SequencerWrites a warm-feeling cold outreach email plus a 3-touch follow-up sequence tailored to a specific investor's thesis.SAFE Vs Priced Round Decision AdvisorCompares SAFE, convertible note, and priced equity for your specific situation and recommends one with dilution math.