Privacy Analyst

Role Overview

Privacy Analyst investigates potential privacy breaches and noncompliance with Bon Secours Mercy Health (BSMH) Privacy/HIPAA-related policies. The position administers BSMH privacy policies and supports compliance with HIPAA, HITECH, and applicable state privacy/confidentiality requirements.

Responsibilities

• Investigate, document, and report privacy and confidentiality issues involving Protected Health Information (PHI) under HIPAA
• Report breaches to DHHS Office for Civil Rights (OCR) and prepare breach notification letters per BSMH policies
• Request and review data/access audits of electronic systems; incorporate findings into investigations
• Create and maintain electronic documentation for privacy incident investigations, resolutions, and corrective actions/sanctions
• Provide regular status updates to the Director, Privacy on investigations and projects
• Ensure HIPAA corrective action plans are implemented and functional
• Maintain confidentiality of all investigation materials
• Travel onsite as needed (up to 2–3 times/month) for education and investigations, as approved

Requirements

• 4–6 years experience working with HIPAA and HITECH privacy rules or related compliance areas

Preferred Qualifications

• Certified in Healthcare Privacy Compliance (Health Care Compliance Association)
• Certified Information Privacy Manager (International Association of Privacy Professionals)
• Prior healthcare experience
• Epic Electronic Health Record experience
• Bachelor’s degree in Business Administration, Health Care Management, Nursing, or Health Information Management