Privacy Incidents & Rights Analyst I (Remote)

American Specialty Health Incorporated

29d•$48,000 - $60,000•Remote

About The Position

American Specialty Health Incorporated (ASH) is seeking a Privacy Incidents & Rights Analyst I to join our Regulatory Strategic Development department. The primary purpose of this position is to support the company's compliance efforts with particular focus on supporting the functions of the company's Privacy Office. Note: The individual in this position is not intended to practice law or provide legal advice.

Requirements

Bachelor’s Degree in English, History, Political Science, similar field of study or equivalent experience required. If equivalent experience, High School Diploma required.
1 year of experience with regulatory compliance in a health care environment, with experience in regulatory compliance research, privacy regulations and federal regulatory issues required.
Excellent research skills.
Strong analytical and writing skills.
Proficient in MS Office, including Word and Excel; strong computer skills preferred.
Demonstrated organizational skills.

Nice To Haves

Master’s Degree in Health Care Administration, Paralegal or Legal preferred.
Experience with health insurance contracts and certificate forms and working with health plans and employer groups preferred.
Knowledge of state and federal privacy laws and regulations, such as HIPAA, GLBA and GINA, as well as general understanding of state and federal rules on managed care and wellness benefits strongly preferred.
In-depth understanding of ASH systems, policies and procedures preferred.

Responsibilities

Supports Privacy Office activities by focusing on the following key accountabilities with limited supervision by the Sr. Manager, Privacy Office: Record, process and manage requests received by the Privacy Office in relation to HIPAA and state privacy rights within a thorough and timely manner with limited oversight. This includes but is not limited to: 1) validating requests for releases of protected health information and authorizations for personal representatives, 2) responding to privacy rights-related requests (e.g., accountings, amendments, restrictions, deletions, opt-outs) , 3) coordinating such efforts among multiple internal departments, and 4) maintaining documentation of actions taken for reporting purposes.
Monitor and document receipt and resolution of assigned hotlines and group email accounts on behalf of the Privacy Office within applicable time frames. Report non-routine requests to management and coordinate subpoena requests with Legal. Serve as back-up to the Sr. Manager-Privacy Incidents & Rights for all related privacy office functions involving privacy rights.
As directed by management, and as back-up to the Privacy Incident team, thoroughly investigate and document reports of unauthorized disclosures of protected health information within required time frames. Keep management informed of issues related to such activity.
Prepares timely and accurate periodic reports of activity related to Privacy Rights as directed by management.
Communicate and coordinate externally with regulatory authorities and external clients as directed by management, to understand compliance expectations including, but not limited to, successfully negotiating with such authorities to achieve interpretations of regulatory requirements, consulting with supervisor on an ad-hoc basis regarding outcome of such communication. Educates external contacts regarding unique aspects of ASH’s business practices.
Communicate and coordinate internally with various departments to understand rationale of operations and to communicate regulatory enforcement expectations of such operations including recommending courses of action, interpreting and translating enforcement expectations to current business practices. Communicate effectively with internal departments to obtain necessary information for regulatory filings based on the needs of each regulatory agency, in part by educating internal contacts on the unique regulatory environments in assigned states. Consult with supervisors on an as needed basis to resolve any issues.
Serves as a subject matter expert on regulatory compliance topics (primarily privacy and other federal issues as needed) relevant to ASH business in a constantly evolving regulatory environment that can impact various products. Supports Privacy Office initiatives regarding PHI Inventory Assessment/Data Mapping, Document Retention, including developing and modifying assessments, procedures, program materials and training tools as assigned by management.
Under limited supervision, works to research, communicate and coordinate regulatory compliance issues across multiple disciplines and levels of workforce (i.e. communicates well with staff ranging from entry level to senior executive level personnel).
Under limited supervision, completes detailed analysis of federal legislative and regulatory issues in a timely manner as directed by management. Assess and determine impact of regulatory changes on business operations, consulting with supervisor on an ad-hoc basis to resolve any high-level regulatory compliance issues. On an ad-hoc basis, completes regulatory research projects across multiple disciplines and states.
Under minimal supervision, performs detailed research, analysis, and summarization of privacy compliance issues. Consults with supervisor on an as needed basis to resolve compliance issues.
Provides Management with periodic updates regarding individual assignments.
Informs Management of urgent issues.
Assists Management with the training of staff on ASH policies and procedures, department goals and regulatory compliance issues.
Represents the company in an ethical, professional, and positive manner.
Maintains confidentiality of all company information and uses discretion in discussing regulatory compliance issues with internal contacts.
Maintains computer and system skills necessary to perform job functions.
Photocopies, files, scans and faxes as needed to support job responsibilities.
Strictly adheres to department administrative guidelines including, but not limited to, guidelines regarding project tracking and record keeping practices.
Completes all ASH University training requirements, including required regulatory trainings, as well as ad hoc trainings required by management, within required time frames.
Performs other duties as assigned.
Complies with all policies and standards.