Privacy Manager, Healthcare

The Privacy Manager for the Healthcare Division will lead the development, implementation, and enforcement of privacy policies and practices related to the handling of Protected Health Information (PHI) within the division.

This role requires close collaboration with the division’s legal team, Product development team, IT and security teams, to ensure HIPAA compliance and to protect sensitive health information.

Major Responsibilities/Essential Functions: 


* Oversee privacy policies and practices concerning PHI and ensure HIPAA compliance. 


* Implement full visibility, documentation, tracking and change management of PII and PHI metadata across onsite and offsite data locations (storage, third-parties, etc.) to ensure compliance with DSAR requirements.


* Build and maintain data asset inventory within the division.


* Work with the Privacy Officer to integrate division-specific privacy requirements into the broader company privacy strategy.


* Conduct privacy impact assessments, risk management activities within the division, and manage privacy impact evaluations for storage, access and use of PHI and sensitive health care information.  


* Oversee the maintenance of a privacy compliance program, including risk assessments, execute regular audits for compliance, corrective action plans and and enforce when non-compliance occurs


* Manage the reporting of privacy breaches and potential regulatory violations


* Work closely with departments across the organization (Product Teams, Data Governance, Legal, Compliance, Operations, Security, etc.) to integrate privacy considerations into workflows and technology systems.  This includes working with Product Teams to ensure privacy by design principles are being followed during the product development process.


* Responsible for the development and onboarding of privacy-enhancing technologies and practices.


* Execute regular compliance audits and correct any perceived gaps.


* Develop and deliver HIPAA-focused privacy training and certifications to division employees


* .Assist with inquiries and investigations from regulatory bodies related to PHI or data privacy.


* Serve as the point of contact for privacy-related inquiries from customers, employees, and external parties for the division.


* Address inquiries and concerns regarding their privacy rights, including access to and amendment of their medical records.


* Respond to complaints about potential privacy violations and collaborate with appropriate departments to resolve issues.


* Stay informed about evolving patient privacy preferences and advocate for patient control over their data.


* Assist legal team in reviewing and revising Business Associate Agreements


* Track developing state laws and regulations related to personal health information and advise stakeholders within the division at regular intervals regarding the same.

Required Qualifications:


* ...