Privacy Incidents & Rights Analyst I
American Specialty Health Incorporated (ASH) is seeking a Privacy Incidents & Rights Analyst I to join our Regulatory Strategic Development department.
The primary purpose of this position is to support the company's compliance efforts with particular focus on supporting the functions of the company's Privacy Office. Note: The individual in this position is not intended to practice law or provide legal advice.
Salary Range
American Specialty Health complies with state and federal wage and hour laws and compensation depends upon candidate’s qualifications, education, skill set, years of experience, and internal equity. $48,000 to $60,000 Full-Time Annual Salary Range.
Remote Worker Guidelines
- Remote Worker Guidelines: This position will be trained remotely and must be able to work from home (WFH) in a designated work area with company-provided technology equipment. This WFH position requires you have a stable connection to your Internet Service Provider with the ability to participate by video in online meetings over a reliable and consistent network. The internet connection must have a consistent 50 down/10 up Mbps minimum internet speed. 100 down/20 up is recommended to support higher quality video meetings.
Responsibilities
- Supports Privacy Office activities by focusing on the following key accountabilities with limited supervision by the Sr. Manager, Privacy Office:
- Record, process and manage requests received by the Privacy Office in relation to HIPAA and state privacy rights within a thorough and timely manner with limited oversight. This includes but is not limited to: 1) validating requests for releases of protected health information and authorizations for personal representatives, 2) responding to privacy rights-related requests (e.g., accountings, amendments, restrictions, deletions, opt-outs) , 3) coordinating such efforts among multiple internal departments, and 4) maintaining documentation of actions taken for reporting purposes.
- Monitor and document receipt and resolution of assigned hotlines and group email accounts on behalf of the Privacy Office within applicable time frames. Report non-routine requests to management and coordinate subpoena requests with Legal. Serve as back-up to the Sr. Manager-Privacy Incidents & Rights for all related privacy office functions involving privacy rights.
- As directed by management, and as back-up to the Privacy Incident team, thoroughly investigate and document reports of unauthorized disclosures of protected health information within required time frames. Keep management informed of issues related to such activity.
- Prepares timely and accurate periodic reports of activity related to Privacy Rights as directed by management.
- Communicate and coordinate externally with regulatory authorities and external clients as directed by management, to understand compliance expectations including, but not limited to, successfully negotiating with such authorities to achieve interpretations of regulatory requirements, consulting with supervisor on an ad-hoc basis regarding outcome of such communication. Educates external contacts regarding unique aspects of ASH’s business practices.
- Communicate and coordinate internally with various departments to understand rationale of operations and to communicate regulatory enforcement expectations of such operations including recommending courses of action, interpreting and translating enforcement expectations to current business practices. Communicate effectively with internal departments to obtain necessary information for regulatory filings based on the needs of each regulatory agency, in part by educating internal contacts on the unique regulatory environments in assigned states. Consult with supervisors on an as needed basis to resolve any issues.
- Serves as a subject matter expert on regulatory compliance topics (primarily privacy and other federal issues as needed) relevant to ASH business in a constantly evolving