Senior Privacy Specialist

Hartford HealthCare; Hartford (CT); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive benefits program

Job summary

Hartford HealthCare seeks a Senior Privacy Specialist to oversee privacy investigations, respond to inquiries, and coordinate with the Office of Compliance and Integrity. You will review PHI access, maintain documentation, and ensure timely resolution in line with OCI standards.

The role requires a Bachelor’s degree and at least three years of health care privacy experience; privacy certifications are preferred and a certification must be obtained within 180 days.

Qualifications

• Bachelor’s degree required.
• MBA, MHA, or JD with major coursework in business administration, health care administration, or law preferred.
• Minimum of 3 years of health care privacy experience.

Responsibilities

• Lead intake, tracking, investigations, and documentation of privacy inquiries.
• Audit access to PHI and PI; recommend actions.
• Draft breach notification letters for review.
• Collaborate to develop training, policies, and procedures.
• Ensure privacy metrics and safeguarding evaluations are completed.
• Conduct privacy risk assessments and routine monitoring.
• Keep knowledge updated on federal/state privacy laws and accreditation standards.

Skills

Privacy investigations

HIPAA

PHI audits

Stakeholder collaboration

Regulatory compliance

Education

Bachelor’s degree

MBA/MHA/JD preferred

Tools

Privacy certifications preferred

Job description

Location Detail

100 Pearl Street Hartford (10484)

Shift Detail

Monday-Friday

Work where every moment matters.

Every day, more than 40,000 Hartford HealthCare colleagues come to work with one thing in common: Pride in what we do, knowing every moment matters here. We invite you to become part of Connecticut’s most comprehensive healthcare network

Responsibilities

The Senior Privacy Specialist conducts, coordinates and oversees privacy investigations, analyzes automated system access reports, and reviews and responds to reports and inquiries to the Office of Compliance and Integrity. Responsibilities include but are not limited to the following:

• Responsible for the intake, tracking, investigating, resolving, and documentation of all privacy inquiries, and complaints/investigations. Maintains all investigation notes and files in a contemporaneous, organized manner within the OCI incident reporting database. Strives to close all investigations and respond to all routine inquiries within OCI department standards and industry benchmarks. Escalates urgent issues to OCI leadership when necessary.
• Ensures the consistency and integrity of all risk analyses performed with respect to the HIPAA Breach Notification Rule in determining whether there is greater than a low probability of compromise in the event of an impermissible use of disclosure of protected health information. Drafts breach notification letters for review by HHC Privacy Officer.
• Audits access to protected health information (PHI) and personal information (PI) and recommends appropriate action necessary as a result of audit activities.
• Collaborates with key stakeholders in the development, drafting, and revision of training and education materials, policies and procedures, issuance of position papers, memos and documentation to disseminate applicable privacy requirements.
• Responsible for ensuring all required metric reporting goals are met by privacy specialists and in collaboration with others in the OCI department. This includes completion of privacy safeguard evaluations.
• Responsible for conducting privacy risk assessments, routine privacy monitoring, and privacy compliance reviews.
• Collaborates with leadership, key departments, and committees/structures to ensure the implementation, maintenance, enforcement, and an update of appropriate documentation (e.g. NPP, authorization forms, investigation forms, etc.) as needed in compliance with Federal laws, state laws and relevant accreditation standards.
• Maintain current knowledge of applicable federal and state laws and other regulations and accreditation standards, and monitor privacy standards and changes in regulations to ensure organizational adaptation and compliance.

Qualifications

Education

• Bachelor’s degree required
• MBA, MHA, JD with major coursework in business administration, health care administration, or law preferred.

Experience

• A minimum of three (3) years of health care privacy experience, preferably in a large healthcare system setting or in a consulting capacity.

Licensure, Certification, Registration

• Privacy or health information certifications (e.g., CIPP, CHPC, RHIA, RHIT) preferred (will be required to obtain a privacy certification within 180 days)

We take great care of careers.

With locations around the state, Hartford HealthCare offers exciting opportunities for career development and growth. Here, you are part of an organization on the cutting edge – helping to bring new technologies, breakthrough treatments and community education to countless men, women and children. We know that a thriving organization starts with thriving employees-- we provide a competitive benefits program designed to ensure work/life balance. Every moment matters. And this is your moment.