Entity Privacy Officer

Mass General Brigham • Somerville, MA

6d • Hybrid

About The Position

The Privacy Officer serves as the primary privacy advisor and operational lead for Mass General Brigham Community Hospitals. The role partners with hospital leadership, clinical and operational teams, Compliance, Health Information Management, Information Security, Legal, and other stakeholders to ensure compliance with federal and state privacy laws, organizational policies, and regulatory requirements. The officer provides day-to-day privacy consultation, leads privacy-incident investigations, supports audits and monitoring, develops and implements policies and procedures, and advises community hospital leaders on complex privacy and confidentiality matters. The position bridges enterprise privacy strategy with local operational needs across multiple community-based entities.

The role is suited to an experienced healthcare privacy professional who can serve as the primary privacy resource for hospital leadership, partner across disciplines, manage complex investigations, translate regulations into operational practice, and promote a culture of privacy throughout an integrated healthcare system.

Requirements

• Bachelor's degree in a related field of study.
• At least 5 years of progressive privacy or health information managerial and leadership experience working in a complex healthcare system.

Responsibilities

• Serve as the designated Privacy Officer for assigned Community Hospitals.
• Lead investigations of privacy incidents and potential HIPAA violations; document, manage, and track incidents through enterprise reporting and case-management systems.
• Coordinate corrective actions, mitigation plans, and follow-up activities, and partner with operational, clinical, Compliance, and Information Security teams to address privacy risks.
• Monitor incident trends and identify opportunities for process improvement and risk reduction.
• Advise stakeholders on HIPAA, state privacy laws, 42 CFR Part 2, reproductive health privacy requirements, and other applicable regulations.
• Lead or participate in regulatory implementation efforts, assess operational impacts of new requirements, and coordinate implementation plans.
• Develop guidance, workflows, and procedures to support regulatory compliance.
• Draft, revise, implement, and maintain privacy policies, standards, and procedures, collaborating with enterprise stakeholders to promote consistent practices across community hospitals.
• Interpret regulatory and policy requirements for operational leaders and workforce members, and support governance committees and privacy-related workgroups as needed.
• Advise hospital executives, department leaders, physicians, and staff on patient confidentiality, access, disclosure, consent, and appropriate use of information.
• Build relationships across community hospitals to facilitate privacy compliance and risk management.
• Support operational leaders during investigations, audits, reviews, and regulatory inquiries.
• Support privacy auditing and monitoring, including investigations of inappropriate access and other compliance concerns.
• Review audit findings and partner with operational leaders on remediation; participate in risk assessments and proactive privacy monitoring.
• Assist with privacy-related metrics, reporting, and trend analysis.
• Deliver privacy education and awareness activities, develop communications and resources, and support change management related to privacy programs and regulatory requirements.
• Promote a culture of privacy and confidentiality throughout community hospitals.

Benefits

• Competitive base pay.
• Comprehensive benefits.
• Career advancement opportunities.
• Differentials, premiums, and bonuses as applicable.
• Recognition programs designed to celebrate contributions and support professional growth.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior