Privacy Specialist

About the role

Hybrid: 3 day in office 2 day remote. The Privacy Specialist supports the organization's enterprise privacy program by ensuring compliance with HIPAA, CFR Part 2, other federal and state privacy laws, and internal privacy requirements. This position is responsible for conducting privacy risk assessments, investigating privacy incidents and complaints, supporting regulatory compliance activities, managing privacy related requests, delivering workforce education, and collaborating with business partners to integrate privacy by design principles into organizational processes.

Our Mission At Acadia, we exist to Lead Care with Light. Every day, our teams help improve lives, inspire hope, and elevate communities through compassionate behavioral healthcare.

Responsibilities

• Investigate privacy complaints, incidents, reports, and potential security events.
• Determine whether a HIPAA violation or reportable breach has occurred and support notification activities as necessary.
• Maintain audit ready documentation and investigation records.
• Support the development, implementation, and maintenance of the organization's privacy program.
• Review and update privacy policies, standards, procedures, workflows, Data Use Agreements, access requests, and other business practices to identify privacy risks, and support appropriate use, disclosure, access, and safeguarding of protected health information.
• Monitor regulatory developments and emerging privacy requirements.
• Assist in privacy audits, monitoring activities, and corrective action plans.
• Analyze privacy trends and recommend risk mitigation strategies.
• Collaborate with Legal, Compliance, Information Security, IT, HIM, Clinical, and Operations teams to embed privacy by design principles.
• Participate in vendor and third party privacy reviews.
• Support data mapping, records management, data retention, and information governance initiatives.
• Support patient and individual privacy request processes including access, amendments, restrictions, and related inquiries.
• Develop and deliver privacy education and awareness training programs.
• Assist in the facility site visit process.
• Assist in Acadia Healthcare Identity Governance.
• Other duties as assigned.

Requirements

Minimum qualifications: Bachelor’s degree in a related field or equivalent combination of education and experience. Knowledge of H