HIPAA Privacy Rule Analyst

About the Role

Analyzes PHI handling and disclosure practices for County Fire and the 16 HCC Departments against HIPAA Privacy Rule requirements, identifying and documenting compliance gaps.

Responsibilities

• Inventory PHI generation, retention, and destruction practices per department.
• Evaluate policies/procedures against HIPAA Privacy practice areas (minimum necessary, authorizations, Notice of Privacy Practices, patient access/amendment rights, breach procedures, etc.).
• Conduct physical evaluations of PHI storage/handling locations (printers, fax machines, mail).
• Review and evaluate HIPAA security awareness training materials and records.

Requirements

• 4+ years of HIPAA Privacy Rule compliance / healthcare compliance experience.
• Strong working knowledge of 45 CFR Part 164 Subpart E.
• Experience conducting compliance interviews with clinical and administrative staff.

Qualifications

• CHPC (Certified in Healthcare Privacy Compliance) certification (preferred).
• Prior experience with county or multi-facility public health systems (preferred).

Schedule

Onsite for facility inspections and staff interviews at Arrowhead Regional Medical Center (Colton), and clinic/administrative locations in San Bernardino, Rialto, Redlands, and Fontana; remote for documentation review and report writing.