Privacy Assurance Specialist I (Remote - CA)

Stanford Health Care•Sacramento, CA

5d•$48 - $63•Remote

About The Position

The Privacy Assurance Specialist I efficiently manages a portfolio of privacy-related inquiries, complaints, and concerns to ensure they are handled appropriately and in a timely manner. Develops and implements action plans for privacy investigations and provides written communications and reports to enterprise-wide department managers and Human Resources. Conducts interviews with clinical and non-clinical staff and gathers facts to develop the case file using methodologies appropriate to the case to include, but not limited to, patient or staff interviews, medical record reviews, system audit log reviews, internet searches, regulation searches, policy and procedure reviews, and liaising with Information Security staff, the Security Office, and clinical and non-clinical department management as needed. May assist with the development of new policies, procedures, and guidance. Assists patients in exercising their patient privacy rights; assists the Privacy Office with its proactive education program, to include but not limited to, developing training and education materials and presenting training and education sessions to clinical and non-clinical staff whenever necessary. Assists the Privacy Office with its electronic medical record monitoring program, to include but not limited to on-site audits, the evaluation of clinical association patterns and investigations of potential inappropriate access to patient information, investigatory interviews of staff, faculty, and others, and development of investigation reports. Works collaboratively with hospital departments and builds strong working relationships. Assists the Privacy Office with its obligations under the Visiting Observer (V.O.) Program, to include evaluating observation requests and ensuring all visiting observer training and paperwork is completed. Assists the Privacy Office with activities related to ongoing regulatory audit-readiness, privacy risk assessment, and response to regulatory inquiries.

Requirements

Bachelor's degree in a work-related field/discipline from an accredited college or university
A minimum of four (4) years related work experience. Knowledge of electronic medical records, privacy regulations, and ability to evaluate compliance with applicable rules, regulations, processes, policies and procedures.
Ability to communicate effectively, demonstrating excellent verbal and written communication skills
Ability to maintain confidentiality of sensitive and private information in accordance with applicable laws, policies and rules
Ability to plan, organize, and prioritize multiple tasks and work independently to meet deadlines and exercise sound professional judgment
Ability to work effectively with individuals at all levels and with varying backgrounds both within and outside the organization
Knowledge and understanding of federal and state compliance program requirements and ability to plan and implement the elements of an effective compliance program in relation to hospital and healthcare
Knowledge and understanding of general state and federal requirements pertaining to patient privacy and confidentiality
Knowledge of and ability to use a personal computer and standard business software applications for word processing, spreadsheets, databases, presentations and e-mail
Knowledge of and ability to use department-specific and enterprise computerized information systems to support compliance functions
Knowledge of and demonstrated ability to use logical, analytical, and problem-solving based methodologies to investigate complaints and concerns from patients, staff, faculty, and others, preferably experience in investigating privacy-related complaints and concerns

Responsibilities

Contributes to the achievement of Compliance Department goals and objectives and adheres to departmental policies, procedures and standards; complies with governmental and accreditation regulations.
Effectively maintains collaborative working relationships with faculty, physician leadership, hospital and School of Medicine management and staff to achieve increased satisfaction with and participation in the Compliance Program.
Analyzes complaints against available facts; makes case determination in consultation with Privacy Assurance leadership. Documents case findings in a clear, logical, and meaningful fashion; writes case reports to involved parties to include, but not limited to, department managers and Human Resources representatives; prepares written summaries of high-risk cases for Privacy Assurance leadership.
Assists patients in exercising their patient privacy rights, including amending their medical records, receiving an accounting of the disclosures of their medical records, requesting restrictions on access to their medical records and other civil rights related to patient privacy; communicates and/or meets directly with patients to assist with patient privacy rights or concerns; prepares formal correspondence to patients in compliance with applicable privacy rights requirements.
Assists the Privacy Office with its electronic medical record monitoring program, to include, but not limited to, on-site audits, the evaluation of clinical association patterns and investigations of potential inappropriate access to patient information, interviews staff, faculty, and others, and develops of investigative reports.
Assists the Privacy Office with its proactive education program, to include but not limited to developing education materials and presenting training and educational sessions to clinical and non-clinical staff whenever necessary.
Conducts effective interviews with clinical and non-clinical staff; asks appropriate questions relevant to the issue, follows up appropriately on responses provided by the interviewee; identifies opportunities during the interview to obtain additional details and clarify the accuracy of the information presented; asks questions in a non-accusatory manner but with sufficient probing to complete the fact-finding mission.
Conducts thorough investigations related to patient privacy matters and moves quickly to conduct on-site response to reports of potential privacy risks.
Investigates, resolves, and documents privacy complaints from patients, staff, faculty, and others including hotline complaints related to patient privacy; communicates and corresponds with patients regarding privacy complaints by sending timely acknowledgment and closing response letters.
Identifies and documents the specific privacy allegation(s) to be addressed, develops and executes an action plan for investigative proceedings; determines the information that needs to be gathered and the methodology for obtaining needed information which might include, but not be limited to, patient or staff interviews, medical record reviews, system audit log reviews, Internet searches, regulation searches, policy and procedure reviews, and working with Information Security staff, the Security Office, and clinical and non-clinical department management as needed.
Participates in the development of the Privacy Office's long-term and short-term goals, objectives, plans, policies and procedures. Works with the Privacy Assurance leadership to identify and manage changing priorities.
Prepares the case file for closure ensuring that the file is presented in a methodical manner; the file is easily understood by a third-party reviewer and pertinent case documents can be easily found; when necessary for ease of reading, prepares a timeline of events relevant to the issue and the steps taken for resolution.
Receives and logs privacy complaints and concerns from patients, staff, faculty, and others, including hotline complaints related to patient privacy.
Works collaboratively with hospital departments to provide corrective action plan requirements; receives and reviews completed corrective action plans from hospital departments to determine if compliance requirements are adequately met; follows-up with hospital departments as needed to ensure completion of corrective action plan and recommendations; prepares mandatory state reporting documentation regarding violations of state privacy laws and regulations at the direction of Privacy Assurance leadership.
Assists Privacy Assurance management with federal, state and other special investigations and audits. Prepares responses to regulatory inquiries. Develops and maintains government audit readiness plans.
Annually identifies specific needs for self-development and implements a plan to achieve professional growth.
Maintains privacy of patient information and confidentiality of compliance information and activities; consistently demonstrates a high level of professionalism by exercising behaviors consistent with the Compliance Department’s Guiding Principles, including but not limited to Integrity and Openness, Respect and Loyalty, Responsibility and Accountability, Balance and Control, Participation and Enthusiasm, and Humor and Fun.