PRIVACY ANALYST-CORPORATE COMPLIANCE

Union Health•TERRE HAUTE, IN

1d•Onsite

About The Position

The Compliance Department at Union Health is looking for a Privacy Analyst for the Terre Haute campus. We are looking for individuals who are compassionate, fully committed to providing the highest quality health care experience and dedicated to supporting their team who work in a fast-paced environment. The Compliance Department at Union focuses on legal, compliance, and privacy matters within the health system. Join us as we provide compassionate service and high-quality care to the Wabash Valley Communities. We are committed to helping you find a role that recognizes your interests, expertise, and talent and helping you achieve your long-term career goals and aspirations. At Union, you’ll experience an inclusive environment in which you are empowered to be your best self every day.

Requirements

Associate degree in Health Information Management, health care, information security, public health or a related field.
Working knowledge of HIPAA Privacy Rule and other applicable federal and state privacy requirements.
Strong analytical and investigative skills, including the ability to review information, identify concerns, and document findings accurately.
Clear written and verbal communication skills, with the ability to explain privacy requirements to patients and workforce members.
Ability to handle sensitive information with sound judgement, discretion, and professionalism.
Proficiency in Microsoft Office and the ability to learn privacy tracking and reporting systems.
Ability to work independently, organize priorities, manage multiple assignments, and meet deadlines under the direction of the HIPAA Compliance and Privacy Officer.

Nice To Haves

Two to three years’ of health care experience preferred.
Experience with electronic health records systems and audit log tools preferred.

Responsibilities

Support the HIPAA Compliance & Privacy Officer with investigations of privacy incidents and potential breaches of Protected Health Information (PHI) by gathering facts, reviewing relevant information, documenting findings, and preparing materials for breach determinations, notifications, mitigation, and corrective action plans.
Track and analyze privacy incident data, audit findings, trends, and remediation activities; summarize results and identify matters requiring review by the HIPAA Compliance & Privacy Officer.
Assist with privacy risk assessments, internal audits, follow-up reviews, and gap analyses to identify potential vulnerabilities and support evaluation of HIPAA compliance.
Review and analyze audit logs and access reports for inappropriate or suspicious activity; document findings and refer concerns to the HIPAA Compliance & Privacy Officer for direction and follow-up.
Track and process patient privacy-rights, including access, amendment, restriction, and accounting of disclosures; prepare documentation and draft responses in accordance with established procedures and guidance from the HIPAA Compliance & Privacy Officer.
Assist with the development, review, maintenance, and distribution of privacy policies, procedures, forms, and related documentation.
Assist with preparing and delivering privacy training materials, in-services, reminders, and educational resources for workforce members.
Maintain accurate privacy records and prepare clear, concise reports, memoranda, work papers, metrics, and other documentation for review by the HIPAA Compliance & Privacy Officer.
Provide data analysis, records, and supporting documentation for internal and external audits, regulatory inquiries, and governmental investigation requests as directed.
Work collaboratively with clinical, IT, legal, compliance, Health Information Management, and departmental staff to gather information, communicate guidance approved by the HIPAA Compliance and Privacy officer, and support implementation of privacy-related corrective actions.
Monitor developments in privacy laws, regulations, regulatory guidance and best practices; summarize relevant updates for the HIPAA Compliance and Privacy Officer.
Maintain strict confidentiality and exercise tact, discretion, sound judgment, and professionalism when handling sensitive information and interacting with patients, workforce members, and organizational leaders.
Promptly communicate investigation, audit, review, and compliance concerns to the HIPAA Compliance and Privacy officer and seek guidance when matters require escalation or formal determination.
Complete assigned duties independently or as part of a team under the direction of the HIPAA Compliance and Privacy officer and support protects that strengthen the system-wide HIPAA Privacy and Security program.