Sr Privacy Analyst

CommonSpirit Health was formed by the alignment of Catholic Health Initiatives (CHI) and Dignity Health. With more than 700 care sites across the U.S. from clinics and hospitals to home-based care and virtual care services CommonSpirit is accessible to nearly one out of every four U.S. residents. Our world needs compassion like never before. Our communities need caring and our families need protection. With our combined resources CommonSpirit is committed to building healthy communities advocating for those who are poor and vulnerable and innovating how and where healing can happen both inside our hospitals and out in the community.

JOB SUMMARY / PURPOSE
Will investigate and document privacy incidents including privacy incident-related complaints, reports and events within a division, with cross coverage for other divisions. This role will support the handling of complex privacy incidents in alignment with state Privacy Laws and Dept. of Health (DPH) requirements. This role will interact with patients, families, or any complainant, and conduct, document thoroughly and complete privacy event investigations to determine if a privacy violation and/or breach has occurred. In addition, this role will be able to provide support to Division Privacy Officers through management of basic Privacy consults, as well as interaction with regulators during on and off-site privacy-related investigations as applicable. This role is a necessary component of the privacy program, as HIPAA requires that each covered entity have a process to investigate and resolve privacy incidents, and incident-related complaints.

ESSENTIAL KEY JOB RESPONSIBILITIES

1. Assess, understand and address complex situations, issues or problems in an analytical and professional manner.
2. Conduct and document complete investigation of assigned privacy incidents and complaints within the established time frames. Investigations include interviewing staff and other involved parties, conducting access audits, reviewing audit logs, and analyzing event facts to include use of established privacy repository.
3. Interact with multiple internal and external parties as necessary and required to gather and communicate information related to allegations of a privacy incident or breach-related complaint, and address complaints, resolutions and corrective actions in accordance with regulatory requirements.
4. Apply the HIPAA privacy rule and other applicable law relevant to complex privacy incident determinations and resolution, and complete notification documents for breach or validated complaint events. Partner, and coordinate, with IT Cybersecurity and Information Security Officers on assigned privacy events that intersect with security incidents.
5. Work with regulatory bodies to provide information related to past events, and investigative actions and results in conjunction with supervisor or Privacy Officer.
6. Provide basic privacy consults to stakeholders, in conjunction with supervisor or Privacy Officer. 7. Assist in the development of tools and templates related to privacy incident management.

Required Education and Experience

• Bachelor’s degree – experience and/or education may  be considered in lieu of degree.  
• Minimum of five (5) years’ experience in health care  privacy or compliance investigations

Required Licensure and Certifications

• Certification in Health Care Privacy and Security or Health Care Compliance preferred upon hire or required within first 1st year of employment

Required Minimum Knowledge, Skills, Abilities and Training

• Strong communication and analytical skills  
• Ability to dialogue, and effectively communicate both  verbal and written, with internal and external customers 
• Demonstrated knowledge of HIPAA 
• Computer skills and ability to use database applications, Microsoft Office, Google Suite and/or  similar programs 
• Effective verbal and written communication skills • Ability to work with the public as well as internal  customers 
• Ability to effectively conduct investigations through  research and use, and application, of logic and analytical skills 
• Proven ability to work with, and knowledge of, State Department of Public Health and aligned incident/investigation expectations 
• Working knowledge of effective investigation  guidelines and protocol re: privacy incidents 
• Demonstrates strong interpersonal and conflict  resolution skills 
• Ability to research applicable privacy regulations and  provide basic privacy consults as directed
• Possess and apply in-depth knowledge and experience  regarding State DPH privacy rules and regulations