Privacy Analyst

UCLA Health; Los Angeles (CA); Hybrid; USD 89,000 - 190,000; Full time

Job summary

UCLA Health's Office of Compliance Services seeks a Privacy Analyst to support privacy incidents, regulatory guidance, auditing, education, and risk management for protected health information. The role collaborates with Information Security, Legal Affairs, HR, and Audit Advisory Services to strengthen privacy programs and ensure compliance with HIPAA, CMIA, and UC policies.

As part of the Privacy Compliance Program, the Analyst develops guidance, training, and monitoring tools, and supports

Qualifications

• Bachelor’s degree or equivalent credentials.
• CHPC certification.
• Experience conducting investigations and preparing investigation reports.
• Experience reviewing and auditing documents such as Business Associate Agreements and Data Use Agreements.
• Strong regulatory research and analytical skills.
• Excellent written and verbal communication.
• Ability to work independently and collaboratively with stakeholders.
• Strong attention to detail and workload management.

Responsibilities

• Conduct privacy incident reviews and investigations, gather and analyze documentation, and assist with mitigation and reporting obligations.
• Review policies, procedures, workflows, agreements, and data use practices to identify privacy risks and support appropriate handling of PHI.
• Research federal/state privacy laws and provide guidance on complex compliance matters.
• Conduct privacy audits and monitoring activities, track corrective actions, and improve auditing processes.
• Develop privacy education and training based on findings from investigations and regulatory changes.
• Create guidance documents, reports, and tools to strengthen the Privacy Compliance Program.
• Collaborate with departments and stakeholders on privacy investigations and remediation efforts.

Skills

Analytical thinking

Regulatory research

Communication skills

Investigation techniques

Documentation & reporting

Education

Bachelor’s degree

Advanced degree

Job description

Press space or enter keys to toggle section visibility

Onsite or Remote

Flexible Hybrid

Work Schedule

Monday-Friday 8am-5pm

Posted Date

08/12/2026

Salary Range: $88900 - 190300 Annually

Employment Type

Duration

Indefinite

Job #

32384

Primary Duties and Responsibilities

Press space or enter keys to toggle section visibility

Office of Compliance Services

Support the privacy compliance functions of the Office of Compliance Services through investigations, regulatory guidance, auditing, education, and privacy risk management. As the Privacy Analyst, you will evaluate privacy incidents, interpret applicable laws and regulations, assess organizational practices, and advise departments on requirements involving protected health information and other sensitive information. This role works closely with operational departments, Information Security, Legal Affairs, Human Resources, Audit Advisory Services, and other stakeholders to strengthen compliance with HIPAA, CMIA, University of California and UCLA Health privacy policies, and other applicable privacy requirements.

In this role, you will:

• Conduct and support privacy incident reviews and investigations, including gathering and analyzing documentation, participating in interviews, maintaining investigative workpapers, preparing reports, and assisting with mitigation, corrective actions, and reporting obligations.
• Review policies, procedures, workflows, agreements, Data Use Agreements, access requests, and other business practices to identify privacy risks, recommend revisions, and support appropriate use, disclosure, access, and safeguarding of protected health information.
• Research and interpret federal and state privacy laws and emerging regulatory requirements, and provide guidance to departments and stakeholders on complex privacy compliance matters.
• Conduct privacy audits, access reviews, monitoring activities, and targeted compliance reviews; prepare findings and recommendations, track corrective actions, and support improvements to auditing and monitoring processes.
• Develop, coordinate, and deliver privacy education and training, including targeted education based on findings from investigations, audits, monitoring activities, and regulatory changes.
• Develop guidance documents, job aids, reports, monitoring tools, presentations, and other resources that strengthen the Privacy Compliance Program and support compliance committees and organizational leadership.
• Collaborate with operational departments, Audit Advisory Services, Information Security, Legal Affairs, Human Resources, regulatory agencies, and other stakeholders on privacy investigations, compliance initiatives, remediation efforts, and organizational privacy practices.

Salary Range:

$88,900 to $190,300 annually

Job Qualifications

Press space or enter keys to toggle section visibility

Required

• Bachelor’s degree from an accredited academic institution or equivalent credentials.
• CHPC certification.
• Demonstrated expertise conducting investigations, interviewing witnesses, and preparing investigation reports.
• Demonstrated experience preparing educational programs and performing audits.
• Demonstrated experience reviewing and revising transactional documents such as Business Associate Agreements and Data Use Agreements.
• Excellent analytical and problem-solving skills, including the ability to conduct effective and accurate regulatory research and analysis.
• Strong written and verbal communication skills.
• Ability to work independently and collaboratively while establishing and maintaining effective professional relationships with internal and external stakeholders.
• Strong attention to detail with the ability to manage difficult and sensitive situations, prioritize multiple responsibilities, and effectively manage fluctuating workload demands.

Preferred

• Advanced degree in a related field.
• Three years of experience in a healthcare or academic medical center setting. An advanced academic degree may be considered in lieu of experience.
• CIPP certification.
• CHC certification.

As a condition of employment, the final candidate who accepts an offer of employment will be required to disclose if they have been subject to any final administrative or judicial decisions within the last seven years determining that they committed any misconduct; or have filed an appeal of a finding of substantiated misconduct with a previous employer. Current/former UC employees are subject to a personnel file review.