Provide, from a compliance perspective, oversight of organizational-wide privacy including, without limitation: (i) (a) HIPAA Privacy and Breach Notification Rules compliance; and (b) applicable State privacy law pertaining to patient information, employee information, and protected personally identifiable information, as well as applicable Federal and State privacy breach notification rules compliance; (ii) data breach determinations and follow up; (iii) investigations; (iv) risk assessment and analysis; (v) internal and external reporting; (vi) HIPAA training framework and program; (vii) the management and monitoring of business associate agreements and associated processes; and (viii) digital privacy compliance-related matters. Develop and perform focused audit-related activities including, without limitation, the conduct of compliance reviews, the assessment of existing internal controls, and the performance of gap analyses, concerning organizational risk areas (whether such risks are predefined by regulation or regulatory guidance, or identified through organizational experience) for legal and regulatory compliance.