Privacy Specialist

AmeriPharma • Laguna Hills, CA

13d • $37 - $45

About The Position

The Privacy Specialist is responsible for managing day-to-day healthcare privacy compliance activities, including privacy incident review, patient privacy rights requests, audits, documentation, training, and monitoring of protected health information practices. This role serves as a privacy resource for internal departments and supports compliance with HIPAA, California privacy and medical information confidentiality requirements, and other applicable state privacy requirements. The Privacy Specialist also collaborates with IT on privacy-related cybersecurity matters involving electronic protected health information, system access, audit logs, and data protection practices. The Privacy Specialist may be assigned other compliance projects by Compliance leadership.

Requirements

• Working knowledge of HIPAA, protected health information, patient confidentiality, and secure handling of medical information.
• Familiarity with California healthcare privacy requirements and other state privacy requirements applicable to healthcare operations.
• Experience reviewing privacy incidents, patient records, authorizations, disclosures, complaints, audit findings, or compliance documentation.
• General understanding of privacy-related cybersecurity concepts, including user access, audit logs, secure transmission, system permissions, and electronic protected health information safeguards.
• Strong written and verbal communication skills.
• Strong attention to detail and ability to maintain accurate documentation.
• Ability to handle confidential and sensitive information with professionalism and discretion.
• Ability to work independently, identify privacy risks, document findings, and escalate issues appropriately.
• Proficiency with Microsoft Office, Google Workspace, electronic health records, pharmacy systems, compliance tracking tools, or similar systems.

Nice To Haves

• Experience in specialty pharmacy, infusion pharmacy, home health, ambulatory care, long-term care pharmacy, or another patient-service healthcare setting is preferred.
• Certified in Healthcare Privacy Compliance (CHPC) or similar certification preferred.

Responsibilities

• Manage day-to-day privacy compliance activities, including tracking, documentation, monitoring, and follow-up.
• Monitor compliance with HIPAA, California healthcare privacy requirements, other applicable state privacy requirements, and internal policies.
• Review, investigate, document, and escalate potential privacy incidents, including unauthorized access, improper disclosures, misdirected communications, patient complaints, and other suspected privacy concerns.
• Maintain documentation of privacy investigations, findings, corrective actions, mitigation steps, and follow-up.
• Review and process patient privacy rights requests, including access, amendment, restrictions, confidential communications, accounting of disclosures, and revocation of authorizations.
• Review patient communications, forms, authorizations, notices, and disclosures for appropriate privacy language and handling of protected health information.
• Review and track Business Associate Agreements and vendor privacy documentation.
• Conduct privacy audits and monitoring activities, including access reviews, communication reviews, documentation audits, and department-specific privacy reviews.
• Identify privacy risks and recommend corrective actions, retraining, policy updates, or process improvements.
• Provide privacy guidance to internal departments regarding patient communications, disclosures, record requests, authorizations, and documentation practices.
• Develop, update, and maintain privacy policies, procedures, forms, logs, templates, and training materials.
• Conduct or coordinate privacy training, including onboarding, annual training, and targeted retraining.
• Collaborate with IT on privacy and cybersecurity compliance matters involving electronic protected health information, system access, user permissions, audit logs, secure transmission, and suspected unauthorized access.
• Support internal audits, accreditation reviews, payer audits, regulatory inquiries, and other compliance reviews related to privacy and patient information practices.
• Participate in additional compliance projects as delegated, including policy review, regulatory research, audit support, accreditation support, corrective action tracking, and compliance monitoring.
• Maintain confidentiality of patient information, employee information, company records, investigations, vendor information, and compliance matters.
• Perform other compliance-related duties as assigned.

Benefits

• Full benefits package including medical, dental, vision, life that fits your lifestyle and goals
• Great pay and general compensation structures
• Employee assistance program to assist with mental health, legal questions, financial counseling etc.
• Comprehensive PTO and sick leave options
• 401k program
• Plenty of opportunities for growth and advancement
• Company sponsored outings and team-building events
• Casual Fridays

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level