Collaborate with Procurement, IT Security and business with the review and negotiation of business associate agreements and privacy language as needed, particularly for HIPAA and privacy issues
Complete audits, risk assessment activities, analysis, and corrective actions
Continuously learn about new regulatory requirements and industry trends and incorporate them within the privacy program
Manages and oversees privacy-related investigations and complaints, and the resolutions in collaboration with other compliance leaders, team members, and counsel, as appropriate
Prepares and reviews privacy-related tracking reports, incidents, and data analytics to identify opportunities for educational opportunities and policies, procedures and process improvement
Oversee the breach notification process, including any follow-up with affected individuals (e.g., call teams in response to reported breach) and external agencies’ investigations, including drafting responses and remediation and implementing corrective action
Maintains knowledge of rules and regulations (HIPAA, HITECH, state privacy laws and Identity Theft laws) that impact specific ministries and the organization and acts as a subject matter expert to support and provide guidance to workforce members
Requirements
Bachelor's degree in Business Administration or Health Administration (required)
A Juris Doctor degree, CPA, Master's degree in Hospital Administration, Business Administration, or a related field is preferred—Privacy Director Specific: Juris Doctor degree and privacy certifications, including IAPP’s CIPP or CIPM
Minimum of five years of experience in compliance within the healthcare industry, including leadership experience
Proficient knowledge of laws, regulations, and standards related to health care compliance
Outstanding analytical, written, and verbal communication skills