Major Responsibilities:

Serves as a Privacy Officer and maintains up-to-date knowledge of federal and state privacy laws and HIPAA regulations.Acts as subject matter expert for the appropriate use and disclosure of PHI in accordance with all laws, regulations, policies, and other applicable guidelines. Provides advice and feedback to Advocate Health leaders on privacy-related questions and policies.Facilitates and coordinates privacy-related complaints and ensures thorough investigations in partnership with Department Leadership, Privacy-Compliance, Human Resources, Risk Management, Patient Portal Support, and other parties involved to respond to HIPAA concerns and issues. Submits completed investigation documentation to the Privacy-Compliance department.Collaborates with and follows up with various leadership to obtain the necessary information to complete investigations, runs Epic audit reports, and determines the type of privacy violation.  Adheres to strict deadlines while ensuring detailed, thorough, and accurate investigation into all applicable concerns. Issues breach notifications in coordination with the Enterprise Privacy/Compliance department.Assists patients with PHI Amendment requests and communicates with them on the status and results of their requests. Works cooperatively with Physicians and other clinical authors with respect to patients’ right to request PHI amendments. Collaborates with HIM Data Integrity and other involved parties when Identity Theft/Fraud has been identified.Serves as an expert resource, and educator for HIPAA and state privacy laws, provides timely guidance and support, and collaborates with leaders and team members across the region to help ensure compliant practices involving the use of PHI. Educates diverse audiences through presentations at leadership meetings as well as 1:1 and small-group educational opportunities.Serves as a point person for privacy-related issues at meetings and within work teams and communicates information appropriately to leadership.Attends quarterly Department and/or Market meetings to report our Privacy Statistics and education. 

License/Registration/Certification Required:

Health Information Administrator (RHIA), orHealth Information Technician (RHIT)

Education Requirements:

Associate degree in health information management or related field.

Experience Requirements:

Typically requires 2 years of experience in Health Information Management in complex acute and/or ambulatory environments.

Knowledge, Skills & Abilities Required:

Possess high attention to detail.Knowledge and understanding of HIPAA Privacy laws and possess the ability to put them into practice.Ability to effectively investigate and resolve problems using critical thinking consistent with standards, practices, policies, procedures, regulations, and laws.Excellent verbal, listening, presentation, and written communication skills. Experience developing and sharing information through presentations required.Proficient knowledge in the use of electronic health records, data capture technology, Microsoft Office products such as Word, Excel, PowerPoint, Access and the use of virtual meeting technology.

This job description indicates the general nature and level of work expected of the incumbent. It is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities required of the incumbent. Incumbent may be required to perform other related duties.