Privacy Program Data Analyst (HIPAA)

Job Summary:

The Privacy Program Data Analyst supports the WMC Health Network’s privacy program by analyzing privacy-related data, assisting in risk assessments, and ensuring compliance with HIPAA and other privacy regulations. Reporting to the Director of Privacy Program, this role helps monitor privacy incidents, track trends in privacy risks, support privacy investigations, and assist in maintaining privacy policies and training programs. The Privacy Analyst collaborates with various departments to promote privacy awareness and protect patient information across the network.

Responsibilities:

• Monitor and analyze privacy incidents and potential breaches, documenting findings and supporting investigations.
• Track and analyze trends in privacy incidents and risks to proactively identify areas requiring attention.
• Conduct privacy risk assessments and assist in identifying vulnerabilities within the network’s privacy program.
• Support the development, review, and maintenance of privacy policies, procedures, and related documentation.
• Help prepare and deliver privacy training materials and educational programs for staff across the network.
• Manage and maintain accurate records and reports on privacy activities, compliance metrics, and regulatory requirements.
• Collaborate with clinical, IT, legal, and compliance teams to ensure coordinated privacy efforts and regulatory adherence.
• Support internal and external privacy audits by providing data analysis and required documentation.
• Stay current with changes in privacy laws, regulations, and best practices to ensure ongoing compliance.
• Assist the Director of Privacy Program in various projects and initiatives aimed at enhancing the privacy program’s effectiveness.
• Monitor trends and patterns in privacy data to proactively identify potential risks or areas requiring further investigation.
• Perform other duties as assigned.

Qualifications/Requirements:

Experience:

• 1 year of experience in data analysis, privacy or regulatory management in a large healthcare facility, required

Education:  

• Bachelor’s degree in Business, Accounting, Finance, Healthcare Administration, or a related field, required.
• Master’s degree in Business, Accounting, Finance, Healthcare Administration, or a related field, preferred.

Licenses / Certifications:  

• Certified in Healthcare Privacy Compliance (CHPC) preferred.

Other: 

• Confidentiality:  It is an expectation that all employees at Westchester Medical Center Health Network will protect the confidentiality of all patient care, personnel, and business/financial information. 
• Compliance:  Employees will complete required competencies, annual mandatory training requirements and adhere to the code of conduct as described in the Westchester Medical Center Health Network Compliance Plan and brochure.  
• Disclaimer:  The above statements are intended to describe the general nature and level of work being performed.  They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.

Special Requirements:

• Knowledgeable in HIPAA, and Federal and State regulations for hospitals & physician practices.
• Planning and conducting effective, confidential investigations.

Physical Requirements: