HIM Coordinator

CorrectHealth • Alpharetta, GA

9d • Hybrid

About The Position

CorrectHealth is seeking a full-time Health Information Coordinator for their growing team in Alpharetta, Ga. This role supports the Company's legal, compliance, and risk management functions by managing the day-to-day operations of the health information management (HIM) and HIPAA privacy program across CorrectHealth's correctional healthcare sites in Georgia and Louisiana. The Coordinator reports directly to the Director of Health Information Management for daily HIM operations and departmental priorities, and has a dotted-line reporting relationship to the Chief Legal Officer for privacy program administration, privacy incident and breach matters, litigation holds, subpoena and litigation-related records productions, and Business Associate Agreement (BAA) oversight. This position serves as the primary point of contact for medical records requests, privacy inquiries, release-of-information (ROI) processing, records governance, and privacy incident intake. The role is at the intersection of clinical operations, legal, and technology, requiring an understanding of the unique sensitivity of correctional health records, which are often requested by various legal entities and can become evidence in litigation. The Coordinator ensures all disclosures are lawful, authorized, documented, and defensible, while supporting the company's mission of delivering quality care to justice-involved patients.

Requirements

• Associate's degree in Health Information Management, Health Information Technology, or a related field required.
• RHIT or RHIA credential (AHIMA) required, or ability to obtain within twelve (12) months of hire.
• Minimum of three (3) years of experience in health information management, release of information, or healthcare privacy compliance.
• Working knowledge of HIPAA Privacy and Breach Notification Rules, 42 C.F.R. Part 2, and state health records laws.
• Experience with electronic health record systems and release-of-information workflows.
• Experience responding to subpoenas, court orders, and attorney records requests required.
• Ability to read and apply regulatory text and distinguish between valid and deficient records requests.
• Exceptional attention to detail and documentation discipline; understands that every disclosure may later be scrutinized in litigation.
• Strong written and verbal communication skills, with the ability to explain privacy requirements in plain language to clinical staff, custody staff, sheriffs, and county or parish personnel.
• Sound judgment and discretion in handling highly sensitive and confidential information.
• Ability to manage competing deadlines, maintain organized logs and trackers, and work independently with minimal supervision.
• Proficiency in Microsoft Office (Word, Excel, Outlook, SharePoint) and ability to learn RMIS (Riskonnect) and EHR (Sapphire, CorEMR, etc.) platforms.
• Must be able to pass a criminal background check and obtain and maintain security clearance at client correctional facilities; clearance is a condition of continued employment.

Nice To Haves

• Bachelor's degree preferred.
• Experience in a correctional, behavioral health, or other institutional healthcare setting strongly preferred.

Responsibilities

• Receive, log, triage, and process all requests for protected health information (PHI), including patient requests, attorney requests, subpoenas, court orders, HITECH requests, law enforcement requests, coroner and medical examiner requests, and requests from county or parish partners.
• Verify the legal sufficiency of each request, including validity of patient authorizations under 45 C.F.R. § 164.508, applicability of 42 C.F.R. Part 2 for substance use disorder records (including MOUD/MAT records), and state-specific requirements under Georgia and Louisiana law.
• Prepare and maintain Certificates of Authenticity of Medical Records and custodian-of-records affidavits; coordinate with the Chief Legal Officer on records productions in litigation and in response to subpoenas.
• Track statutory response deadlines and ensure timely, complete, and accurate productions; escalate any request that cannot be timely fulfilled.
• Maintain the accounting-of-disclosures log in accordance with 45 C.F.R. § 164.528.
• Assist, if requested, with the transfer of health records upon patient release, transfer between facilities, or transfer to state custody, consistent with continuity-of-care obligations and NCCHC standards.
• Manage the intake, routing, and fulfillment of medical records requests at facility transition (contract start-up and wind-down), including chain-of-custody documentation.
• Maintain the HIPAA privacy and HIM policy library; draft routine updates for Director of HIM and Chief Legal Officer review and coordinate version control and distribution.
• Develop and deliver new-hire and annual HIPAA privacy training for clinical, administrative, and corporate workforce members; maintain training completion records and follow up on delinquencies.
• Prepare facility-level guidance, FAQs, and quick-reference materials in plain language suitable for nursing staff, providers, and security personnel.
• Administer the Company's records retention schedule and records governance matrix; coordinate destruction of records that have met retention, subject to litigation holds.
• Maintain the litigation hold register; issue, track, and release holds as directed by the Chief Legal Officer.
• Monitor electronic health record (EHR) documentation integrity issues (late entries, amendments, addenda, patient-requested amendments under 45 C.F.R. § 164.526) and coordinate appropriate responses.
• Support EHR transitions, data migrations, and legacy-record archival from a privacy and records-integrity standpoint.
• Prepare monthly and quarterly privacy and HIM metrics reports (request volumes, turnaround times, incidents, training completion, BAA status) for the Director of HIM, the Chief Legal Officer, and executive leadership.
• Support NCCHC and ACA accreditation surveys and client audits with respect to health records and confidentiality standards.
• Provide general administrative and project support to the Legal, Compliance & Risk Management department as assigned.
• Perform other related duties as assigned.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree