Privacy Associate

Upper Peninsula Health Plan • Marquette, MI

3d • Hybrid

About The Position

The Privacy Associate assists the Compliance and Risk Management Officer (Privacy Officer) with Upper Peninsula Health Plan’s (UPHP’s) privacy program. This position ensures UPHP remains compliant with healthcare privacy rules and regulations.

Requirements

• Minimum: Associate degree in business, health information management, healthcare administration, or related field
• Minimum: One (1) to two (2) years of experience in the health-care setting
• Working knowledge of MS Office (Word, Excel, PowerPoint, Access)
• Keyboarding proficiency
• Excellent human relation and oral, written and presentation skills
• Excellent organizational abilities with attention to detail
• Strong problem-solving skills; sound business judgment
• Ability to enter and access information from a computer
• Ability to access all areas of the UPHP offices
• Manual dexterity and mobility

Nice To Haves

• Preferred: Bachelor’s degree in business, health information management, healthcare administration, or related field; HIPAA Privacy Officer certification or other relevant privacy/compliance certifications
• Preferred: Minimum plus experience conducting HIPAA risk assessments, managing privacy incidents, or working directly with regulatory audits or investigations.
• Knowledge of HIPAA regulations, Code of Federal Regulations (CFR) Title 45, and guidance from the Office for Civil Rights (OCR).
• Familiarity with healthcare privacy and compliance frameworks.

Responsibilities

• Follows established UPHP policies and procedures, objectives, safety standards, and sensitivity to confidential information.
• Supports and coordinates day-to-day operations of UPHP’s privacy program; develops, maintains, and revises policies and procedures for the general operation of the privacy program and its related activities to ensure compliance with all rules and regulations.
• Investigates all potential Health Insurance Portability and Accountability Act (HIPAA) breaches by conducting breach risk assessments; provides required notifications to identified parties and federal/state agencies; reviews reported disclosures.
• Assists with all privacy related audits and inquiries.
• Assists in developing training related to HIPAA and privacy and ensures that all staff receive initial, annual, and periodic training.
• Collaborates on initiatives with the UPHP Security Administrator.
• Attends conferences, seminars, and continuing education sessions as required.
• Maintains confidentiality of client data.
• Performs other related duties as assigned or requested.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: Associate degree