Privacy Officer & Records Manager

Privacy Leadership: Serve as the designated HIPAA Privacy Officer, maintaining and enforcing privacy policies, procedures, and Notice of Privacy Practices (NPP). Compliance Risk Assessment: Perform ongoing privacy risk assessments, manage privacy incident response, conduct breach risk assessments, and handle notifications in accordance with federal and state laws. Records Governance: Oversee health records management, including retention, archiving, legal holds, destruction schedules, and Release of Information (ROI) protocols. Training Culture: Develop and deliver mandatory HIPAA privacy training for all workforce members and foster a culture of data privacy. Vendor BAA Management: Oversee the privacy review process for vendor contracts and ensure execution and management of Business Associate Agreements (BAAs). Audits Inquiries: Lead investigations into privacy complaints, audit EHR access logs, and serve as the primary point of contact for regulatory inquiries (e.g., OCR).