Overview

CommonSpirit Health was formed by the alignment of Catholic Health Initiatives (CHI) and Dignity Health. With more than 700 care sites across the U.S. from clinics and hospitals to home-based care and virtual care services CommonSpirit is accessible to nearly one out of every four U.S. residents. Our world needs compassion like never before. Our communities need caring and our families need protection. With our combined resources CommonSpirit is committed to building healthy communities advocating for those who are poor and vulnerable and innovating how and where healing can happen both inside our hospitals and out in the community.

Responsibilities

JOB SUMMARY / PURPOSE

Will investigate and document privacy incidents including privacy incident-related complaints, reports and events within a division, with cross coverage for other divisions. This role will support the handling of complex privacy incidents in alignment with state Privacy Laws and Dept. of Health (DPH) requirements. This role will interact with patients, families, or any complainant, and conduct, document thoroughly and complete privacy event investigations to determine if a privacy violation and/or breach has occurred. In addition, this role will be able to provide support to Division Privacy Officers through management of basic Privacy consults, as well as interaction with regulators during on and off-site privacy-related investigations as applicable. This role is a necessary component of the privacy program, as HIPAA requires that each covered entity have a process to investigate and resolve privacy incidents, and incident-related complaints.

ESSENTIAL KEY JOB RESPONSIBILITIES

Assess, understand and address complex situations, issues or problems in an analytical and professional manner.

Conduct and document complete investigation of assigned privacy incidents and complaints within the established time frames. Investigations include interviewing staff and other involved parties, conducting access audits, reviewing audit logs, and analyzing event facts to include use of established privacy repository.

Interact with multiple internal and external parties as necessary and required to gather and communicate information related to allegations of a privacy incident or breach-related complaint, and address complaints, resolutions and corrective actions in accordance with regulatory requirements.

Apply the HIPAA privacy rule and other applicable law relevant to complex privacy incident determinations and resolution, and complete notification documents for breach or validated complaint events. Partner, and coordinate, with IT Cybersecurity and Information Security Officers on assigned privacy events that intersect with security incidents.

Work with regulatory bodies to provide information related to past events, and investigative actions and results in conjunction with supervisor or Privacy Officer.

Provide basic privacy consults to stakeholders, in conjunction with supervisor or Privacy Officer. 7. Assist in the development of tools and templates related to privacy incident management.

Qualifications

Required Education and Experience

Bachelor’s degree – experience and/or education may be considered in lieu of degree.

Minimum of five (5) years’ experience in health care privacy or compliance investigations

Required Licensure and Certifications

Certification in Health Care Privacy and Security or Health Care Compliance preferred upon hire or required within first 1st year of employmentRequired Minimum Knowledge, Skills, Abilities and Training

Strong communication and analytical skills

Ability to dialogue, and effectively communicate both verbal and written, with internal and external customers

Demonstrated knowledge of HIPAA

Computer skills and ability to use database applications, Microsoft Office, Google Suite and/or similar programs

Effective verbal and written communication skills • Ability to work with the public as well as internal customers

Ability to effectively conduct investigations through research and use, and application, of logic and analytical skills

Proven ability to work with, and knowledge of, State Department of Public Health and aligned incident/investigation expectations

Working knowledge of effective investigation guidelines and protocol re: privacy incidents

Demonstrates strong interpersonal and conflict resolution skills

Ability to research applicable privacy regulations and provide basic privacy consults as directed

Possess and apply in-depth knowledge and experience regarding State DPH privacy rules and regulations

Pay Range

$27.70 - $40.17 /hour

We are an equal opportunity/affirmative action employer.