HIPAA Privacy Officer

Salary Range

$41.29 - $64.61

Overview

Located in the heart of Washington, we enjoy open skies, snow-capped mountains, and the lakes and rivers of the high desert. We are the proud home of orchards, farms, and small communities. Confluence Health actively supports the communities we serve and their quality of life through our community support program and through our individual efforts as involved community members.

Full Time Employees of Confluence Health receive a wide range of benefits in addition to compensation.

• Medical, Dental & Vision Insurance
• Flexible Spending Accounts & Health Saving Accounts
• Paid Time Off
• Generous Retirement Plans
• Life Insurance
• Long-Term Disability
• Tuition Reimbursement
• Employee Assistance Program
• Adoption Assistance
• Shift Differential

For more information on our Benefits & Perks, click here!

Summary

HIPAA Privacy Officer and Patient Civil Rights Coordinator is responsible for the development and daily operations of the HIPAA Privacy and Patient Civil Rights programs for Confluence Health and its affiliates. This includes development, implementation, and maintenance of policies and procedures as well as education, investigation, monitoring, and auditing responsibilities.

Position Reports To: Compliance Officer

Essential Functions

• Builds and manages a strategic and comprehensive privacy program that defines, develops, maintains and implements policies and procedures for effective privacy practices that ensure the confidentiality of protected health information (PHI).

• Performs HIPAA Privacy and Civil Rights compliance investigations, responds to patient grievances related to HIPAA or Civil Rights, and ensures mitigation and resolution where necessary. Collaborates with Human Resources, Managers, and SL Directors to ensure consistent application of sanctions.

• Ensures privacy and confidentiality consent and authorization forms, information notices and educational materials are consistently and appropriately used. Partners with training and/or department management to assist and ensure educational efforts are adequate. Ensures Privacy and Civil Rights facility signage, forms, policies, standards, and procedures are up to date.

• Monitors patterns of inappropriate access and/or disclosure of protected health information. Reviews and approves internal and external requests for EHR access.

• Provides or ensures delivery of HIPAA Privacy and Civil Rights training and orientation to all employees, volunteers, medical and professional staff and applicable business associates.

• Participates in the development, implementation, and ongoing compliance monitoring of all business associate agreements to ensure that all privacy concerns, requirements and responsibilities are addressed.

• Works cooperatively with Health Information Management (HIM) leadership in overseeing patient rights to inspect, amend, and restrict access to protected health information when appropriate.

• Manages all required breach determinations, tracking, and notification processes under Federal and state breach rules and requirements.

• Develops and maintains the organizations language access plan.

• Collaborates with the HIPAA Security Officer to ensure alignment between Security and Privacy compliance programs including policies, practices, investigations, and acts as a liaison to the IT department for the HIPAA Privacy program.

• Establishes, with the HIPAA Security Officer, an ongoing process to track, investigate and report inappropriate access and disclosure of protected health information.

• Cooperates with the U.S. Department of Health and Human Services Office for Civil Rights, state regulators, accrediting bodies, and/or other external entities in any compliance reviews, investigations, or surveys.

• Maintains current knowledge of applicable Federal and state Privacy and Patient Civil Rights laws, regulations, and accreditation standards.

• Communicates effectively with patients, family, staff, and management with empathy and kindness to ensure concerns, expectations, and questions are addressed.

• Performs other duties as assigned.

Demonstrate Standards of Behavior and adhere to the Code of Conduct in all aspects of jobperformance at all times.

Qualifications

Required:

• Bachelors Degree and/or a nationally recognized privacy certification (e.g. CHPc CHPS, CIPP).

• Three years of related experience in HIPAA Privacy and/or regulatory compliance.

• A high level of integrity and trust.

• Extensive knowledge and experience in State and Federal information, Privacy laws and patient Civil Rights laws.

• Ability to communicate effectively in written and verbal form.

Desired:

• Strong organizational skills.
• Demonstrated skills in collaboration, teamwork, and problem-solving to achieve goals.
• Extensive familiarity with health care relevant legislation and standards for the protection of health information and patient privacy.
• Effective presentation skills.
• Capable of independent work ethic with minimal supervision.

Physical/Sensory Demands

O = Occasional, represents 1 to 25% or up to 30 minutes in a 2 hour workday.

F = Frequent, represents 26 to 50% or up to 1 hour of a 2 hour workday.

C = Continuous, represents 51% to 100% or up to 2 hours of a 2 hour workday.

Physical/Sensory Demands For This Position:

• Walking - F

• Sitting/Standing - C

• Reaching: Shoulder Height - F

• Reaching: Above shoulder height - F

• Reaching: Below shoulder height - F

• Climbing - O

• Pulling/Pushing: 25 pounds or less - F

• Pulling/Pushing: 25 pounds to 50 pounds - F

• Pulling/Pushing: Over 50 pounds - F

• Lifting: 25 pounds or less - F

• Lifting: 25 pounds to 50 pounds - F

• Lifting: Over 50 pounds - O

• Carrying: 25 pounds or less - F

• Carrying: 25 pounds to 50 pounds - F

• Carrying: Over 50 pounds - O

• Crawling/Kneeling - O

• Bending/Stooping/Crouching - F

• Twisting/Turning - F

• Repetitive Movement - F

Working Conditions:

• Work is performed in a normal office environment, clinical areas throughout Confluence Health, Business Office and conference room settings. Requires a frequent contact with staff, patients, management and physicians. The typical work day is combination of working independently and also working closely with others on teams to achieve improved outcomes through data collection, observation, analysis, planning, implementing a plan and evaluating the impact of changes. Hours may be irregular at times; overtime may be required. Requires working under stressful conditions at times.

Job Classification:

• FLSA: Exempt

• Hourly/Salary: Salary

Physical Exposures For This Position:

• Unprotected Heights - No

• Heat - Yes

• Cold - Yes

• Mechanical Hazards - No

• Hazardous Substances - No

• Blood Borne Pathogens Exposure Potential - Yes

• Lighting - Yes

• Noise - Yes

• Ionizing/Non-Ionizing Radiation - No

• Infectious Diseases - Yes

Required:

• Bachelors Degree and/or a nationally recognized privacy certification (e.g. CHPc CHPS, CIPP).

• Three years of related experience in HIPAA Privacy and/or regulatory compliance.

• A high level of integrity and trust.

• Extensive knowledge and experience in State and Federal information, Privacy laws and patient Civil Rights laws.

• Ability to communicate effectively in written and verbal form.

Desired:

• Strong organizational skills.

• Demonstrated skills in collaboration, teamwork, and problem-solving to achieve goals.

• Extensive familiarity with health care relevant legislation and standards for the protection of health information and patient privacy.

• Effective presentation skills.

• Capable of independent work ethic with minimal supervision.

• Builds and manages a strategic and comprehensive privacy program that defines, develops, maintains and implements policies and procedures for effective privacy practices that ensure the confidentiality of protected health information (PHI).

• Performs HIPAA Privacy and Civil Rights compliance investigations, responds to patient grievances related to HIPAA or Civil Rights, and ensures mitigation and resolution where necessary. Collaborates with Human Resources, Managers, and SL Directors to ensure consistent application of sanctions.

• Ensures privacy and confidentiality consent and authorization forms, information notices and educational materials are consistently and appropriately used. Partners with training and/or department management to assist and ensure educational efforts are adequate. Ensures Privacy and Civil Rights facility signage, forms, policies, standards, and procedures are up to date.

• Monitors patterns of inappropriate access and/or disclosure of protected health information. Reviews and approves internal and external requests for EHR access.

• Provides or ensures delivery of HIPAA Privacy and Civil Rights training and orientation to all employees, volunteers, medical and professional staff and applicable business associates.

• Participates in the development, implementation, and ongoing compliance monitoring of all business associate agreements to ensure that all privacy concerns, requirements and responsibilities are addressed.

• Works cooperatively with Health Information Management (HIM) leadership in overseeing patient rights to inspect, amend, and restrict access to protected health information when appropriate.

• Manages all required breach determinations, tracking, and notification processes under Federal and state breach rules and requirements.

• Develops and maintains the organizations language access plan.

• Collaborates with the HIPAA Security Officer to ensure alignment between Security and Privacy compliance programs including policies, practices, investigations, and acts as a liaison to the IT department for the HIPAA Privacy program.

• Establishes, with the HIPAA Security Officer, an ongoing process to track, investigate and report inappropriate access and disclosure of protected health information.

• Cooperates with the U.S. Department of Health and Human Services Office for Civil Rights, state regulators, accrediting bodies, and/or other external entities in any compliance reviews, investigations, or surveys.

• Maintains current knowledge of applicable Federal and state Privacy and Patient Civil Rights laws, regulations, and accreditation standards.

• Communicates effectively with patients, family, staff, and management with empathy and kindness to ensure concerns, expectations, and questions are addressed.

• Performs other duties as assigned.

Demonstrate Standards of Behavior and adhere to the Code of Conduct in all aspects of jobperformance at all times.