HIPAA Privacy Rule Analyst

Xtreme Solutions, Inc.; Colton (CA); On-site; USD 90,000 - 120,000; Full time

Job summary

Xtreme Solutions, Inc. seeks a HIPAA Privacy Compliance Analyst to assess PHI handling and disclosure practices across County Fire and 16 HCC Departments against HIPAA Privacy Rule requirements. You will identify gaps and document findings to support corrective actions.

Responsibilities include inventorying PHI generation, storage, and destruction; evaluating policies against privacy practice areas; and reviewing training materials. Travel to Colton and other SB locations is required.

Qualifications

• 4+ years of HIPAA Privacy Rule compliance / healthcare compliance experience.
• Strong working knowledge of 45 CFR Part 164 Subpart E.
• Experience conducting compliance interviews with clinical and administrative staff.

Responsibilities

• Inventory PHI generation, retention, and destruction practices per department.
• Evaluate policies/procedures against HIPAA Privacy practice areas (minimum necessary, authorizations, Notice of Privacy Practices, patient access/amendment rights, breach procedures, etc.).
• Conduct physical evaluations of PHI storage/handling locations (printers, fax machines, mail).
• Review and evaluate HIPAA security awareness training materials and records.

Skills

HIPAA Privacy

CFR 164 Subpart E

Staff interviews

Job description

Position Summary

Analyzes PHI handling and disclosure practices for County Fire and the 16 HCC Departments against HIPAA Privacy Rule requirements, identifying and documenting compliance gaps.

Key Responsibilities

• Inventory PHI generation, retention, and destruction practices per department.
• Evaluate policies/procedures against HIPAA Privacy practice areas (minimum necessary, authorizations, Notice of Privacy Practices, patient access/amendment rights, breach procedures, etc.).
• Conduct physical evaluations of PHI storage/handling locations (printers, fax machines, mail).
• Review and evaluate HIPAA security awareness training materials and records.

Required Qualifications

• 4+ years of HIPAA Privacy Rule compliance / healthcare compliance experience.
• Strong working knowledge of 45 CFR Part 164 Subpart E.
• Experience conducting compliance interviews with clinical and administrative staff.

Preferred Qualifications

• CHPC (Certified in Healthcare Privacy Compliance) certification.
• Prior experience with county or multi-facility public health systems.

Travel

Onsite for facility inspections and staff interviews at Arrowhead Regional Medical Center (Colton), and clinic/administrative locations in San Bernardino, Rialto, Redlands, and Fontana; remote for documentation review and report writing.