HIPAA Privacy Program Specialist

Blue Shield of California; California; Hybrid; USD 112,000 - 167,000; Full time

Job summary

Blue Shield of California in Oakland, CA is seeking a Privacy Office Specialist, Consultant to support the Privacy Program and ensure compliance with HIPAA, HITECH, CMIA, and related privacy laws. The role reports to the Privacy Office Manager or Director and emphasizes enforcing privacy practices across affiliated entities.

The position requires 7+ years of privacy experience, a bachelor’s degree or equivalent, and a strong ability to guide internal teams on privacy projects, develop trainings,

Qualifications

• Requires a bachelor’s degree or High School Diploma/GED with 4 years of additional relevant experience in lieu of a degree.
• Requires at least 7 years of prior relevant experience in healthcare privacy, healthcare compliance, health information management functions related to fulfilling individual rights requests, or another related field.
• Requires a deep working knowledge and application of California state and federal privacy laws, including HIPAA/HITECH, CMIA, minor consent laws, and privacy-related consumer protections laws, such as the Telephone Consumer Protection Act (TCPA).
• Preferred: Privacy compliance health plan experience that includes familiarity with Privacy Impact Assessments; health information management; auditing and monitoring; investigating, managing, and reporting privacy incidents; corporate compliance training
• Preferred: CIPP/US Certification or HCCA CHPC Certification

Responsibilities

• In this role, you will:
• Support the Privacy Office’s oversight of Blue Shield's compliance with applicable state and federal privacy laws, including HIPAA and HITECH
• Lead assigned privacy inquiries that involve responding to individual rights requests and questions, privacy complaints, and requests for privacy guidance, as the primary focus of this role
• Manage all aspects of assigned cases, including regulatory analysis, prompt follow-up, and timely and accurate documentation of case files. Identify matters requiring escalation and, when appropriate, direct business units in conducting root-cause analysis, and implementing mitigation and remediation efforts
• Assist, evaluate, and determine appropriateness of ad hoc requests from internal clients to disclose protected health information (PHI) to third parties, including employer-sponsored health plans, and/or to allow third parties access to, or use of, Blue Shield PHI
• Consult with internal clients as a subject matter expert, providing privacy guidance about proposed projects and enterprise-wide initiatives that involve the access, use, or disclosure of Blue Shield PHI
• Develop and assist with the implementation of workforce privacy trainings, privacy policies, desk level procedures, resource guides, job aids, and other educational tools
• Audit and monitor compliance with the Privacy Program, develop and implement corrective action plans (CAPs) on behalf of the Privacy Office, advise on CAPs issued by other business units that include privacy-related components, and conduct Privacy Impact Assessments and Data Protection Impact Assessments
• When internal business needs arise, assist with negotiating Business Associate Agreements, lead privacy investigations, and act as a liaison with regulatory enforcement agencies to address technical assistance letters, investigation compliance reviews, audits, and other related reviews
• Perform other duties as assigned

Skills

Privacy compliance

Regulatory analysis

Data privacy

Stakeholder guidance

Training development

Education

Bachelor's degree or equivalent

Job description

Blue Shield of California in Oakland, CA is seeking a Privacy Office Specialist, Consultant to support the Privacy Program and ensure compliance with HIPAA, HITECH, CMIA, and related privacy laws. The role reports to the Privacy Office Manager or Director and emphasizes enforcing privacy practices across affiliated entities.

The position requires 7+ years of privacy experience, a bachelor’s degree or equivalent, and a strong ability to guide internal teams on privacy projects, develop trainings,