Privacy Incidents & Rights Analyst II (Remote)

American Specialty Health Incorporated (ASH) is seeking a Privacy Incidents & Rights Analyst II to join our Regulatory Strategic Development department. The primary purpose of this position is to support the company's compliance efforts with particular focus on supporting the functions of the company's Privacy Office. Note: The individual in this position is not intended to practice law or provide legal advice.

Salary Range: $56,700 to $74,000 full-time annual salary range.

Schedule

This position will be trained remotely and must be able to work from home (WFH) in a designated work area with company-provided technology equipment. This WFH position requires a stable internet connection with a consistent 50 down/10 up Mbps minimum speed (100 down/20 up recommended).

Responsibilities

• Supports Privacy Office activities by focusing on the following key accountabilities with limited supervision:
  • Record, process, and manage requests received by the Privacy Office related to HIPAA and state privacy rights in a thorough and timely manner, including:
    • Validating requests for releases of protected health information and authorizations for personal representatives.
    • Responding to privacy rights-related requests (e.g., accountings, amendments, restrictions, deletions, opt-outs).
    • Coordinating efforts among multiple internal departments.
    • Maintaining documentation of actions taken for reporting purposes.
  • Monitor and document receipt and resolution of assigned hotlines and group email accounts on behalf of the Privacy Office within applicable time frames.
  • Report non-routine requests to management and coordinate subpoena requests with Legal.
  • Serve as back-up to the Sr. Manager, Privacy Incidents & Rights for all related privacy office functions involving privacy rights.
  • Thoroughly investigate and document reports of unauthorized disclosures of protected health information within required time frames, as directed by management and as back-up to the Privacy Incident team.
  • Prepare timely and accurate periodic reports of activity related to Privacy Rights as directed by management.
• Communicate and coordinate externally with regulatory authorities and external clients as directed by management to:
  • Understand compliance expectations, including negotiating interpretations of regulatory requirements.
  • Educate external contacts regarding unique aspects of ASH’s business practices.
• Communicate and coordinate internally with various departments to:
  • Understand operational rationale and communicate regulatory enforcement expectations.
  • Recommend courses of action and translate enforcement expectations to current business practices.
  • Obtain necessary information for regulatory filings based on the needs of each regulatory agency.
  • Educate internal contacts on unique regulatory environments in assigned states.
• Serve as a subject matter expert on regulatory compliance topics (primarily privacy and other federal issues) relevant to ASH business in a constantly evolving regulatory environment.
• Support Privacy Office initiatives regarding PHI Inventory Assessment/Data Mapping, Document Retention, including developing and modifying assessments, procedures, program materials, and training tools as assigned by management.
• Research, communicate, and coordinate regulatory compliance issues across multiple disciplines and levels of workforce under limited supervision.
• Complete detailed analysis of federal legislative and regulatory issues in a timely manner as directed by management, assessing and determining the impact of regulatory changes on business operations.
• Perform detailed research, analysis, and summarization of privacy compliance issues under minimal supervision.
• Provide Management with periodic updates regarding individual assignments and inform Management of urgent issues.
• Assist Management with the training of staff on ASH policies and procedures, department goals, and regulatory compliance issues.
• Maintain confidentiality of all company information and use discretion in discussing regulatory compliance issues with internal contacts.
• Maintain computer and system skills necessary to perform job functions.
• Adhere to department administrative guidelines, including project tracking and record-keeping practices.
• Complete all ASH University training requirements, including required regulatory trainings and ad hoc trainings, within required time frames.
• Perform other duties as assigned.

Requirements

• Bachelor’s Degree in English, History, Political Science, or a similar field of study, or equivalent experience required. If equivalent experience, High School Diploma required.
• Master’s Degree in Health Care Administration, Paralegal, or Legal preferred.
• 3 years of experience with regulatory compliance in a health care environment, with experience in regulatory compliance research, privacy regulations, and federal regulatory issues required.
• Experience with health insurance contracts and certificate forms and working with health plans and employer groups preferred.
• Knowledge of state and federal privacy laws and regulations, such as HIPAA, GLBA, and GINA, as well as a general understanding of state and federal rules on managed care and wellness benefits strongly preferred.
• Excellent research skills and strong analytical and writing skills.
• In-depth understanding of ASH systems, policies, and procedures preferred.
• Proficient in MS Office, including Word and Excel; strong computer skills preferred.
• Demonstrated organizational skills.

Skills

• Demonstrated ability to interact in a positive, respectful manner and establish and maintain cooperative working relationships.
• Excellent customer service to meet the needs and expectations of both internal and external customers.
• Excellent listening and interpersonal communication skills.
• Ability to effectively organize, prioritize, multi-task, and manage time.
• Demonstrated accuracy and productivity in a changing environment with constant interruptions.
• Demonstrated ability to analyze information, problems, issues, situations, and procedures to develop effective solutions.
• Ability to exercise strict confidentiality in all matters.

Mobility

• Primarily sedentary; able to sit for long periods of time.

Physical Requirements

• Ability to see, speak, and hear other personnel and/or objects.
• Ability to communicate both in verbal and written form.
• Ability to travel within and around the facility or Work from Home (WFH) environment.
• Capable of using a telephone, computer keyboard, and mouse.
• Ability to lift up to 10 lbs.