EHR Privacy Analyst

UPMC Ireland; Dublin; Hybrid; EUR 70,000 - 90,000; Part time

Benefits offered by this job

Maternity/Paternity leave

Pension plan

Death in Service

Critical Illness cover

Flexible working

Job summary

UPMC is seeking an EHR Privacy Analyst to provide specialist privacy guidance for the Cúram programme in Ireland. The role focuses on embedding GDPR, regulatory, and organisational requirements across the design, implementation and deployment of the EHR solution and data flows.

You will work with Records Management and programme stakeholders to ensure privacy, retention, disposal and lifecycle management are addressed in the EHR framework.

Qualifications

• Specialist knowledge of data protection and privacy practices.
• Experience with GDPR, DPIAs and Data Processing Agreements.
• Awareness of information governance and records management principles.

Responsibilities

• Provide privacy advice for the EHR programme and ensure GDPR compliance throughout design and deployment.
• Develop and review records of processing activities, DPIAs and related governance artifacts.
• Advise project teams on privacy by design and information governance during build, testing and go-live.
• Review supplier contracts for data protection requirements and DPA terms.
• Map data flows and ensure appropriate privacy controls and lifecycle management.

Skills

Privacy

Data protection

Information governance

GDPR

Risk management

Education

Master of Law (LLM)

Job description

EHR Privacy Analyst

Location: Swift Square, Dublin 9 and Kilkenny (Hybrid)

Job type: Fixed-Term (6 months)

Hours: 39 hours per week

Closing Date: 19/11/2026

Overview of role:

To provide specialist privacy advice to the Cúram programme, ensuring that GDPR, regulatory, and organisational requirements are considered and embedded throughout the design, implementation, and deployment of the EHR solution and its associated processes, integrations, and data flows.

Primary Duties and Responsibilities:

• Provide specialist advice and guidance on data protection, privacy, and information governance matters associated with the Cúram programme.
• Support the development, maintenance, and review of programme privacy documentation, including Records of Processing Activities, Data Protection Impact Assessments, Legitimate Interest Assessments, Transfer Impact Assessments, and related governance artefacts.
• Advise project teams on GDPR compliance, privacy by design principles, and information governance considerations throughout the design, build, testing, deployment, and implementation phases of the programme.
• Review supplier contracts to identify data protection requirements, including Data Processing Agreements.
• Support the assessment and documentation of data flows between the EHR and integrated systems, ensuring appropriate privacy and information governance controls are considered and documented.
• Collaborate with the Records Manager and programme stakeholders to ensure records retention, archiving, disposal, and information lifecycle management requirements are incorporated into the EHR solution and supporting processes.
• Review new and updated programme policies, procedures, standards, operational processes, and governance documents to identify and incorporate relevant data protection, privacy, records management, and information governance requirements.
• Map the process for Data Subject Rights requests, ensuring EHR related procedures and system capabilities support compliance with GDPR requirements for access, rectification, erasure, restriction, objection, and data portability requests.
• Support the review and update of privacy notices, consent materials, and other transparency documentation to ensure processing activities introduced through the EHR programme are accurately documented and communicated.
• Identify, assess, and document privacy and data protection risks arising from programme activities, ensuring risks are appropriately recorded within the Data Protection Risk Register, assigned to relevant risk owners, and supported by proportionate mitigation actions.
• Support the investigation and resolution of privacy, confidentiality, and information governance issues arising during programme delivery, including testing, data migration, go-live, and post-implementation activities.

Qualifications & Experience

Required

• Masters of Law (LLM)
• Minimum of 8 years Legal and/or Data Protection experience

Preferred

• Second Language is Desirable

This job description is intended to be an outline of the areas of responsibility. As UPMC and the post holder develop, this job description may be subject to review in light of the changing needs of the business.

Equal Opportunity Statement and Benefits

UPMC is an equal opportunity employer.We celebrate diversity and are committed to creating an inclusive environmentfor all employees.

At UPMC we provide a total rewards programthat is not only market competitive, but fair and provides growth opportunitiesfor all our colleagues.

• Fully paid maternity and paternity leave for new parents.
• Competitive PensionPlan, company funded Death in Service Benefit x 3 times.
• Critical Illness coverfor all employees up to the age of 66.

Performance and Recognition – Rewards for performance that supports the goals and mission ofUPMC through our annual ACES programme.

Work-Life Balance – Enhanced annual leave up to a maximum of 27 days. Flexibleworking opportunities to support you to work around external familycommitments.

Developmentand Career Opportunities – Opportunities for each employee to reachtheir career goals through continued learning and/or advancement.

About UPMC

UPMC is a renowned multinational academic medicalcentre committed to delivering people-focused care that’s close to home.Headquartered in Pittsburgh and affiliated with the University of PittsburghSchools of the Health Sciences, UPMC shapes the future of health throughclinical and technological innovation, research and education.UPMCexpands its expertise globally, bringing world-class care acrosscontinents through its UPMC Internationaldivision — an owned and operatednetwork of hospitals and ambulatory care centres in Italy, IrelandandCroatia. UPMC International brings new access to the signature specialtyservices of UPMC Hillman Cancer Centre, UPMC Sports Medicineand others tomore people in more places around the world.

In Ireland UPMC has provided high-quality healthcare in the South East since2006. UPMC’s operations in Ireland now include UPMC Whitfield Hospital inWaterford, UPMC Sports Surgery Clinic in Dublin, UPMC Kildare Hospital inClane, and UPMC Aut Even Hospital in Kilkenny. Outpatient care is available atthe UPMC Carlow Outreach Centre, UPMC Hillman Cancer Centre radiotherapylocations in Waterford and Cork, UPMC The 4th Practice in Mallow, and acrossUPMC Sports Medicine Clinics in Dublin, Waterford, Limerick, Tipperary, Cork, andMayo. UPMC has also established a nationwide Concussion Network. UPMC'sGlobal Technology Operation Centre is based in Kilkenny.