As the designated Privacy Officer, the incumbent develops, implements, monitors, and improves the organization's privacy program; coordinates investigation and response to potential privacy incidents and breaches; oversees patients' privacy rights; and serves as a resource to workforce members, medical staff, leadership, business associates, and patients regarding the appropriate use and disclosure of protected health information (PHI) and medical information. The incumbent may periodically visit clinical, registration, HIM, clinic, and other operational areas; review paper or electronic records; participate in meetings, audits, tracers, surveys, and education activities; and interact with staff, medical staff, patients, vendors, and regulatory representatives.