Privacy Specialist

Acadia Healthcare; Franklin (TN); Hybrid; USD 80,000 - 110,000; Full time

Benefits offered by this job

Competitive salary

Health, Dental, Vision

401(k) Plan with company match

Paid time off

Life and AD&D insurance

EAP & mental wellness

Growth opportunities

Job summary

Acadia Healthcare is seeking a Privacy Specialist to join our enterprise privacy program, ensuring adherence to HIPAA, CFR Part 2, and internal privacy requirements. You will conduct privacy risk assessments, investigate incidents, support regulatory compliance activities, and educate the workforce on privacy by design principles.

In a hybrid schedule (3 days in office, 2 days remote), you will collaborate with Legal, Compliance, IT, HIM, Clinical, and Operations to protect patient information

Qualifications

• Knowledge of HIPAA, HITECH, and healthcare privacy requirements.
• Strong analytical, investigative, organizational, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to manage sensitive and confidential information with discretion.

Responsibilities

• Investigate privacy complaints, incidents, reports, and potential security events.
• Determine whether a HIPAA violation or reportable breach occurred and support notification activities as necessary.
• Maintain audit-ready documentation and investigation records.
• Support the development, implementation, and maintenance of the organization's privacy program.
• Review and update privacy policies, standards, procedures, workflows, Data Use Agreements, access requests, and other practices to identify privacy risks.
• Monitor regulatory developments and emerging privacy requirements.
• Assist in privacy audits, monitoring activities, and corrective action plans.
• Collaborate with Legal, Compliance, Information Security, IT, HIM, Clinical, and Operations to embed privacy-by-design principles.
• Participate in vendor and third-party privacy reviews.
• Support data mapping, records management, data retention, and information governance initiatives.
• Support patient and individual privacy request processes including access, amendments, restrictions, and related inquiries.
• Develop and deliver privacy education and awareness training programs.

Skills

HIPAA knowledge

Analytical skills

Investigative skills

Communication skills

Discretion with information

Organizational skills

Education

Bachelor’s degree in related field

Job description

Overview

About This Role

Hybrid: 3 day in office 2 day remote.

The PrivacySpecialistsupports the organization's enterprise privacy program by ensuring compliance with HIPAA, CFR Part 2, other federal and state privacy laws, and internal privacy requirements. This positionis responsible forconducting privacy risk assessments, investigating privacy incidents and complaints, supporting regulatory compliance activities, managing privacyrelated requests, delivering workforce education, and collaborating with business partners to integrate privacyby design principles into organizational processes.

The PrivacySpecialistsupports the organization's enterprise privacy program by ensuring compliance with HIPAA, CFR Part 2, other federal and state privacy laws, and internal privacy requirements. This positionis responsible forconducting privacy risk assessments, investigating privacy incidents and complaints, supporting regulatory compliance activities, managing privacyrelated requests, delivering workforce education, and collaborating with business partners to integrate privacyby design principles into organizational processes.

Our Mission

At Acadia, we exist to Lead Care with Light. Every day, our teams help improve lives, inspire hope, and elevate communities through compassionate behavioral healthcare.

Compensation & Benefits

We value your expertise and dedication—and we invest in your success.

• Competitive Base Salary commensurate with experience
• Comprehensive Medical, Dental, and Vision Insurance
• 401(k) Plan with Company Match
• Paid Time Off (PTO) and recognized holidays
• Company-paid Basic Life and AD&D Insurance
• Employee Assistance Program (EAP) and mental wellness resources
• Opportunities for professional growth and advancement within Acadia’s nationwide network

Responsibilities

What you’ll do…

Investigate privacy complaints, incidents, reports, and potential security events.

• Determinewhether a HIPAA violation or reportable breach has occurred and support notificationactivitiesas necessary.

• Maintain auditready documentation and investigation records.

• Support the development, implementation, and maintenance of the organization's privacy program.

• Review and update privacy policies, standards, procedures, workflows, Data Use Agreements, access requests, and other business practices toidentifyprivacy risks, and supportappropriate use, disclosure, access, and safeguarding of protected health information.

• Monitor regulatory developments and emerging privacy requirements.

• Assistin privacy audits, monitoring activities, and corrective action plans.

• Analyze privacy trends and recommend risk mitigation strategies.

• Collaborate with Legal, Compliance, Information Security, IT, HIM, Clinical, and Operations teams to embed privacybydesign principles.

• Participate in vendor andthirdpartyprivacy reviews.

• Support data mapping, records management, data retention, and information governance initiatives.

• Supportpatient andindividualprivacy requestprocessesincluding access, amendments, restrictions, and related inquiries.

• Develop and deliver privacy education and awareness training programs.

• Assistinthe facility sitevisitprocess

• Assistin Acadia Healthcare Identity Governance

• Other duties as assigned

Qualifications

What you'll bring...

Minimum

• Bachelor’s degree in a related field or equivalent combination of education and experience.
• Knowledge of HIPAA, HITECH, and healthcare privacy requirements.
• Strong analytical, investigative, organizational, andproblem-solvingskills.
• Excellent written and verbal communication skills.
• Ability to manage sensitive and confidential information with discretion.

Preferred Qualifications

• CHPS, CHC, CHPC, CIPP, or similar certification preferred.
• 1-2 years of healthcare privacy, compliance, auditing, investigations, or related experience preferred.
• Experience supporting enterprise privacy programs and risk assessments.
• Experience inmulti-sitehealthcare environments.
• Knowledge of privacyby design and data governance principles.

Why Acadia?

When you join Acadia Healthcare, you become part of a team dedicated to improving lives through compassionate care and ethical leadership. We are committed to helping our employees grow professionally while making a meaningful difference for patients, families, and communities.

At Acadia, we:

• Lead Care with Light by supporting those who care for others.
• Set the standard for care through accountability and excellence.
• Lift and uplift one another through collaboration and respect.
• Innovate quickly to save lives by improving processes and outcomes.
• Succeed as one by working together toward a common purpose.

If you're passionate about investigations, healthcare compliance, and protecting patients while strengthening organizational integrity, we encourage you to apply.

Acadia Healthcare is proud to be an Equal Opportunity Employer. We are committed to creating an inclusive workplace where everyone can thrive. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, genetic information, or any other status protected by applicable law.

AHCORP

LI-TB1

We are committed to providing equal employment opportunities to all applicants for employment regardless of an individual’s characteristics protected by applicable state, federal and local laws.