Job Description
Senior Privacy Analyst – Contract Opportunity
\n
Position Summary
\n
- \n
- The Senior Privacy Analyst supports the Agency Privacy Officer in the day-to-day operation of the Agency’s privacy program. Reviews, tracks, coordinates, and documents privacy-sensitive requests and incidents involving Medicaid applicants, recipients, and beneficiaries; claims, eligibility, and enrollment information; provider and program integrity data; PHI; and PII.
\n
\n
Key Responsibilities
\n
- \n
- Process and review individual access requests, information-gathering requests, recipient-directed disclosures, HIPAA authorizations, subpoenas and legal requests, privacy complaints, privacy incidents, and breach reporting activities.
- Apply HIPAA Privacy and Breach Notification requirements.
- Ensure compliance with Medicaid confidentiality requirements and regulations.
- Review requests and incidents for privacy risks and compliance concerns.
- Verify identity and authority while adhering to minimum necessary standards.
- Conduct remote and onsite privacy assessments and follow escalation procedures.
\n
\n
\n
\n
\n
\n
\n
Program Support & Audit Participation
\n
- \n
- Assist with development, implementation, maintenance, and documentation of the Agency privacy program.
- Participate in audits conducted by SSA, IRS, HHS, CMS, OCR, State Examiner’s Board, and other oversight agencies.
\n
\n
\n
Knowledge, Skills & Abilities
\n
- \n
- Working knowledge of HIPAA Privacy Rule and Breach Notification requirements.
- Knowledge of Medicaid confidentiality requirements, including 42 CFR Part 431, Subpart F.
- Understanding of 42 CFR Part 2 considerations.
- Experience reviewing subpoenas, court orders, HIPAA authorizations, access requests, and privacy incident reports.
- Strong analytical, documentation, compliance, and problem-solving skills.
\n
\n
\n
\n
\n
\n
Regulatory Knowledge Areas
\n
- \n
- HIPAA Privacy Rule
- HIPAA Breach Notification Rule
- Medicaid Confidentiality Requirements
- 42 CFR Part 431, Subpart F
- 42 CFR Part 2
- PHI and PII Protection Standards
- Minimum Necessary Standard
- Identity and Authority Verification Requirements
\n
\n
\n
\n
\n
\n
\n
\n