Privacy Analyst

UCLA Outpatient Clinics; Los Angeles, Northern (CA, KY); Hybrid; USD 89,000 - 190,000; Full time

Job summary

Office of Compliance Services at UCLA Health seeks a Privacy Analyst to support privacy incident reviews, interpret HIPAA and related regulations, assess practices, and advise departments on handling protected health information. The role collaborates with Information Security, Legal Affairs, HR, and Audit Advisory Services to strengthen privacy compliance across UCLA Health.

The position involves conducting audits, developing training, and creating guidance to mitigate privacy risks, with a

Qualifications

• Experience evaluating privacy incidents and advising on HIPAA requirements.
• Ability to review policies and data use agreements to identify privacy risks.
• Experience conducting privacy audits and monitoring activities.

Responsibilities

• Conduct and support privacy incident reviews and investigations, gathering and analyzing documentation, interviews, and reports.
• Review policies, procedures, workflows, agreements, and data use requests to identify privacy risks and advise on safeguarding of protected health information.
• Research and interpret federal and state privacy laws and provide guidance on complex privacy compliance matters.
• Conduct privacy audits, access reviews, monitoring activities, and targeted compliance reviews; track corrective actions.
• Develop and deliver privacy education and training based on findings and regulatory changes.
• Develop guidance documents and resources to strengthen the Privacy Compliance Program.
• Collaborate with departments and stakeholders on privacy investigations and remediation efforts.

Skills

Privacy compliance

HIPAA knowledge

Regulatory interpretation

Auditing

Training delivery

Job description

Office of Compliance Services

Support the privacy compliance functions of the Office of Compliance Services through investigations, regulatory guidance, auditing, education, and privacy risk management. As the Privacy Analyst, you will evaluate privacy incidents, interpret applicable laws and regulations, assess organizational practices, and advise departments on requirements involving protected health information and other sensitive information. This role works closely with operational departments, Information Security, Legal Affairs, Human Resources, Audit Advisory Services, and other stakeholders to strengthen compliance with HIPAA, CMIA, University of California and UCLA Health privacy policies, and other applicable privacy requirements.

In this role, you will:

• Conduct and support privacy incident reviews and investigations, including gathering and analyzing documentation, participating in interviews, maintaining investigative workpapers, preparing reports, and assisting with mitigation, corrective actions, and reporting obligations.
• Review policies, procedures, workflows, agreements, Data Use Agreements, access requests, and other business practices to identify privacy risks, recommend revisions, and support appropriate use, disclosure, access, and safeguarding of protected health information.
• Research and interpret federal and state privacy laws and emerging regulatory requirements, and provide guidance to departments and stakeholders on complex privacy compliance matters.
• Conduct privacy audits, access reviews, monitoring activities, and targeted compliance reviews; prepare findings and recommendations, track corrective actions, and support improvements to auditing and monitoring processes.
• Develop, coordinate, and deliver privacy education and training, including targeted education based on findings from investigations, audits, monitoring activities, and regulatory changes.
• Develop guidance documents, job aids, reports, monitoring tools, presentations, and other resources that strengthen the Privacy Compliance Program and support compliance committees and organizational leadership.
• Collaborate with operational departments, Audit Advisory Services, Information Security, Legal Affairs, Human Resources, regulatory agencies, and other stakeholders on privacy investigations, compliance initiatives, remediation efforts, and organizational privacy practices.

Salary Range:

$88,900 to $190,300 annually