The Director, Privacy and Data Management oversees all ongoing activities related to the development, implementation, maintenance of, and adherence to the organization’s policies and procedures covering the privacy of, and access to, patient health and personal information in compliance with federal and state laws and the healthcare organization’s information privacy practices. This position is designated as the Privacy Official pursuant to the HIPAA Privacy Rule.

This position is a full-time, 80hr per pay period, benefit eligible position! Some of the benefits we offer at Fairview include medical insurance - as low as $0, dental insurance - also a $0 option, PTO (up to 24 days per year starting), and 403B with up to a 6% employer match. Click here to learn more!

When working at M Health Fairview, we want to support our employees growth, honor their strengths and give them the freedom to feel empowered to make a difference in the lives of others.

• In conjunction with the Chief Compliance Officer, develops the organization’s patient and consumer privacy program, including compliance with HIPAA and other emerging state and federal privacy laws and regulations.
• Provides development, guidance and assists in the identification, implementation, and maintenance of organizational information privacy policies and procedures in coordination with management, research administration, information technology, and legal counsel.
• Develops and oversees initial and periodic privacy impact assessments for organization projects and partnerships and conducts related ongoing compliance monitoring activities in coordination with the organization’s other compliance and operational assessment functions.
• Works with legal counsel and management to ensure the system has and maintains appropriate privacy and confidentiality consent and authorization forms, information notices and materials reflecting current organization and legal practices and requirements.
• Develops, oversees, directs, or delivers targeted privacy training and orientation to employees, and other appropriate third parties.
• Participates in the development, implementation, and ongoing compliance monitoring of all vendor and business associate agreements to ensure all privacy concerns, requirements and responsibilities are addressed and of research and public health data use agreements, including registries and consortium's.
• Provide guidance and consultation on data uses and disclosures in a highly-regulated healthcare environment.
• Partners with IT and Research Administration to ensure appropriate privacy controls regarding access to data sets and information systems pursuant to the organization’s agreements with vendors, research, and public health partners.
• Works cooperatively with organization units in overseeing patient and consumer rights to inspect, amend, and restrict access to protected health information or other personal information when appropriate.
• Oversees the organization’s process for receiving, documenting, tracking, investigating, and acting on all complaints concerning the organization’s privacy policies and procedures in coordination and collaboration with other similar functions and, when necessary, legal counsel. Reports to leadership on outcomes of privacy concerns and risk mitigation strategies.
• Ensures compliance with privacy practices and consistent application of sanctions for failure to comply with privacy policies for all individuals in the organization’s workforce, extended workforce, and for all business associates, in cooperation with Human Resources, management, and legal counsel as applicable.
• Initiates, facilitates and promotes activities to foster information privacy awareness within the organization and related entities.
• Provides guidance on system initiatives to enhance data use and data sharing for healthcare operations and research. In partnership with the Data and Information Governance Stewardship Council and Data Analytics, establishes standards and provides training for system data stewards on appropriate use and sharing of protected health information.
• In partnership with the University of Minnesota Compliance Office, provides oversight and guidance on the appropriate use of protected health information for research within the Academic Health Center – Information Exchange and within Fairview facilities and departments.
• In partnership with the Chief Information Security Officer, participates in the development, implementation, and ongoing compliance monitoring of information security risks impacting protected health information. Participates in HIPAA Security Rule assessments and risk mitigation strategies.
• Maintains current knowledge of applicable federal and state privacy laws and accreditation standards, and monitors advancements in information privacy technologies to ensure organizational adaptation and compliance.
• Oversees the submission of regulatory reporting requirements pursuant to the HIPAA Breach Notification Rule and state law, and ensures that notifications are completed timely and accurately.

• Demonstrates ability to provide care or service adjusting approaches to reflect developmental level and cultural differences of population served
• Partners with patient care giver in care/decision making.
• Communicates in a respectful manner and ensures a safe, secure environment.
• Individualizes plan of care to meet patient needs.and m odifies clinical interventions based on population served.
• Provides patient education based on as assessment of learning needs of patient/care giver.
• Fulfills all organizational and learning requirements relevant to the role
• Follows all relevant laws, regulations and policies
• Other duties as assigned.

Required

• Bachelor’s degree in legal, or related field
• Five years of experience with privacy, research, or compliance in a regulatory environment
• Two years of management experience overseeing the work of other employees
• Ability to oversee and complete significant projects and communicate effectively to senior executive leadership or governing boards
• Ability to translate regulatory requirements into operational processes
• Knowledge and experience in information privacy laws, access control, release of information, and information protection standards.
• Knowledge in and the ability to apply the principles of project management, and change management
• Demonstrated organization, facilitation, communication, systems and presentation skills.

Preferred 

• Juris Doctorate or Master’s Degree
• Five years of experience in healthcare privacy department overseeing HIPAA compliance
• Privacy certification – CHPC, CIPP or related