Privacy Specialist | Compliance Services

UF Health; Gainesville (FL); Hybrid; USD 70,000 - 110,000; Full time

Job summary

UF Health in Gainesville is seeking a Privacy Specialist to develop and maintain privacy programs, ensuring compliance with data protection laws and HIPAA requirements. The role involves advising on impact assessments, monitoring data handling, and collaborating with Legal, IT, Compliance, and operations to implement robust privacy controls.

The position emphasizes educating staff on privacy regulations, investigating incidents, and maintaining governance documents while supporting regulatory

Qualifications

• Bachelor's degree with 2+ years in compliance/privacy/auditing/legal or related field.
• Associate's degree in health or business field with 4+ years in related field.
• Certification in Compliance, Privacy, or Health Information Management and 6+ years in healthcare privacy.

Responsibilities

• Develops and maintains privacy programs ensuring compliance with data protection laws.
• Advises on privacy impact assessments and monitors data handling practices.
• Collaborates with legal, IT, and management on privacy controls and documentation.
• Trains employees on privacy requirements and investigates breaches and incidents.
• Keeps privacy documents updated to align with evolving regulations.
• Safeguards sensitive information and reinforces privacy commitments.

Skills

HIPAA knowledge

Regulatory research

Communication skills

MS Office proficiency

Education

Bachelor's degree with 2 years in compliance/privacy/auditing/legal

Associate's degree in health/business field with 4 years in related field

Certification in Compliance/Privacy/Health Info Management with 6 years in healthcare

Tools

Microsoft Office

Job description

Overview

Protect patient trust. Strengthen privacy. Make a lasting impact.

Job Details

Work Style: Onsite - Hybrid schedule after probationary period
Location: Gainesville, FL
FTE: Full-Time (1.0 FTE)
Schedule: Monday – Friday, 8:00 AM – 5:00 PM

The Privacy Specialist ensures organizational compliance with data protection laws and privacy policies by developing and maintaining comprehensive privacy programs. This role advises on privacy impact assessments, monitors data handling practices, and collaborates with Legal, IT, Compliance, and operational leaders to implement effective privacy controls. Responsibilities include educating employees on privacy requirements, investigating privacy incidents and breaches, maintaining privacy documentation, and supporting compliance with evolving federal and state regulations. Through proactive guidance and oversight, the Privacy Specialist helps protect sensitive information and reinforces the organization's commitment to privacy, security, and regulatory excellence.

Key Responsibilities

• Develops and maintains privacy programs ensuring compliance with data protection laws.
• Advises on privacy impact assessments and monitors data handling practices.
• Collaborates with legal, IT, and management teams on privacy controls.
• Trains employees on privacy requirements and investigates breaches.
• Updates privacy documentation to align with regulations.
• Safeguards sensitive information and supports data privacy commitments.

Qualifications

Education

• Bachelor's degree and two (2) years of experience in compliance, privacy, auditing, legal, or a related field required;
• Associate's degree in a health or business-related field and four (4) years of experience in compliance, privacy, auditing, legal, or a related field required;
• Certification in Compliance, Privacy, and/or Health Information Management and six (6) years of experience in compliance, privacy, auditing, legal, or a related healthcare field required.

Experience

• Knowledge of state and federal healthcare privacy laws and regulations (including HIPAA).
• Ability to research, interpret, and apply complex healthcare regulations.
• Strong problem-solving and analytical skills.
• Excellent verbal and written communication skills.
• Proficiency with Microsoft Office (Excel, Word, and PowerPoint).
• Strong organizational skills with the ability to work independently in a fast-paced, high-volume environment.

Preferred Education

• Master's degree in Healthcare Administration, Health Information Management, Business Administration, Public Health, Legal Studies, or a related field preferred.

Preferred Qualifications

• CHPC (Certified in Healthcare Privacy Compliance) certification, or ability to obtain within one (1) year of hire.
• CIPP, RHIA, or RHIT certification preferred.
• Experience working with electronic medical record (EMR) systems.
• Experience conducting healthcare privacy, compliance, or regulatory audits.
• Experience developing and delivering adult education and training programs.
• Strong knowledge of healthcare privacy regulations and industry best practices.
• Demonstrated ability to work independently while effectively partnering with clinical, operational, and leadership teams.