Job Abstract

What will you be doing in this role?

Under general supervision from the Chief Privacy Officer, the Privacy Analyst works in implementing and administering federal and state regulatory requirements on patient privacy and the confidentiality of patient information. This position will interact with all levels of CSMC management, employees, physicians, and patients in conducting privacy investigations, reviewing complaints and concerns pertaining to patient privacy, maintaining necessary documentation and taking appropriate follow-up action as needed. The Privacy Analyst stays current on and applies applicable state and federal privacy related law and serves as key internal privacy resource for staff and patients. Incumbents in this role also assist with the review, maintenance and development of applicable privacy related policies and procedures. Duties include:

• Conduct and assist with privacy investigations including receiving complaints and concerns; conduct fact-finding reviews and take appropriate follow-up action while maintaining necessary documentation and drafting incident reports.
• When appropriate, participate in responding to external privacy-related investigations or reviews by regulatory oversight or law enforcement agencies.
• Serve as a resource for answering privacy related questions received from patients, CSMC staff and others.
• Conduct research on and prepare analysis of privacy compliance issues.
• Maintain current knowledge of applicable state and federal privacy related laws, regulations, guidelines and regulatory requirements.
• Assist with review and maintenance of existing privacy related policies and procedures as well as drafting new policies and procedures, as needed.
• Conduct routine and ad hoc audits, reviews, and monitoring activities to assess compliance with privacy regulatory requirements and CSMC policies.
• Develop and implement training and educational initiatives to promote awareness and understanding of privacy regulatory requirements and CSMC policies.
• Participate in applicable committees and meetings, including the Privacy and Security Compliance Sub-Committee

Requirements:

• Bachelor’s degree in business, healthcare administration or a related major required.
• Two (2) years minimum related experience in a legal support, privacy, audit or investigative capacity, or an equivalent combination of education and experience required.