Privacy Specialist
About The Position
The Privacy Specialist supports Acadia Healthcare’s enterprise privacy program by helping ensure compliance with HIPAA, CFR Part 2, other federal and state privacy laws, and internal privacy requirements. The role conducts privacy risk assessments, investigates privacy incidents and complaints, supports regulatory compliance activities, manages privacy-related requests, delivers workforce education, and collaborates with business partners to integrate privacy by design into organizational processes. The position works in a hybrid arrangement, with three days in the office and two days remote. It supports privacy program development and maintenance, policy and business-practice reviews, audit and monitoring activities, incident investigations, patient privacy requests, vendor reviews, data governance initiatives, facility site visits, and Acadia Healthcare Identity Governance.
Requirements
- Bachelor’s degree in a related field or an equivalent combination of education and experience.
- Knowledge of HIPAA, HITECH, and healthcare privacy requirements.
- Strong analytical, investigative, organizational, and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to manage sensitive and confidential information with discretion.
Nice To Haves
- CHPS, CHC, CHPC, CIPP, or similar certification.
- 1–2 years of healthcare privacy, compliance, auditing, investigations, or related experience.
- Experience supporting enterprise privacy programs and risk assessments.
- Experience in multi-site healthcare environments.
- Knowledge of privacy by design and data governance principles.
Responsibilities
- Investigate privacy complaints, incidents, reports, and potential security events.
- Determine whether a HIPAA violation or reportable breach has occurred and support notification activities as necessary.
- Maintain audit-ready documentation and investigation records.
- Support the development, implementation, and maintenance of the organization's privacy program.
- Review and update privacy policies, standards, procedures, workflows, Data Use Agreements, access requests, and other business practices to identify privacy risks and support appropriate use, disclosure, access, and safeguarding of protected health information.
- Monitor regulatory developments and emerging privacy requirements.
- Assist in privacy audits, monitoring activities, and corrective action plans.
- Analyze privacy trends and recommend risk-mitigation strategies.
- Collaborate with Legal, Compliance, Information Security, IT, HIM, Clinical, and Operations teams to embed privacy by design principles.
- Participate in vendor and third-party privacy reviews.
- Support data mapping, records management, data retention, and information governance initiatives.
- Support patient and individual privacy request processes, including access, amendments, restrictions, and related inquiries.
- Develop and deliver privacy education and awareness training programs.
- Assist in the facility site visit process.
- Assist in Acadia Healthcare Identity Governance.
- Perform other duties as assigned.
Benefits
- Competitive base salary commensurate with experience
- Comprehensive medical, dental, and vision insurance
- 401(k) plan with company match
- Paid time off (PTO) and recognized holidays
- Company-paid basic life and AD&D insurance
- Employee Assistance Program (EAP) and mental wellness resources
- Opportunities for professional growth and advancement within Acadia’s nationwide network
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
