The Privacy Specialist independently manages a portfolio of privacy-related complaints, compliance hot line reports and investigations to ensure they are handled appropriately, thoroughly and in a timely fashion. Develops and implements action plans for investigative cases, provides written communications and reports to supervisors, Human Resources, or others as requested. Conducts interviews with clinical and non-clinical staff and gathers facts to develop the case file using methodologies appropriate to the case such as patient or staff interviews, medical record reviews, system audit log reviews, Internet searches, regulation searches, policy and procedure reviews, and liaising with the Office of the General Counsel, Information Security staff, Security Office, and clinical and non-clinical department management as needed. Maintains a database of compliance incidents, questions, issues and corrective action plans.
Possesses active listening skills and customer service experience with managing difficult conversations. Assists patients in exercising their patient privacy rights. Possesses strong interpersonal, verbal, and written communication skills, and the ability to interact and communicate effectively with all levels of staff and customers.
Michigan Medicine improves the health of patients, populations and communities through excellence in education, patient care, community service, research and technology development, and through leadership activities in Michigan, nationally and internationally. Our mission is guided by our Strategic Principles and has three critical components; patient care, education and research that together enhance our contribution to society.
The Privacy Specialist – Senior or Intermediate:
Assists Privacy Manager, Director and other Privacy Specialists in Privacy Program and other compliance activities, which could include reviewing internal processes, documents and reports, and ensuring compliance with internal and external regulatory framework.
Analyzes, compares and evaluates various courses of action and able to make independent decisions on matters of significance, free from immediate direction, within scope of responsibilities.
Primary activities and decision making authority are predominantly performed independently affecting business operations to a substantial degree.
Interprets internal or external business issues and recommends solutions and/or best practices.
Resolves complex issues using a broad perspective to identify solutions and works independently with little guidance.
Possesses strong analytical skills that enable the Specialist to independently and effectively identify and monitor issues, with the ability to quickly analyze issues, and makes practical business-oriented recommendations.
Actively participates in the electronic medical record monitoring program by conducting audit reviews/investigations of accesses to the EMR system(s), the evaluation of clinical association patterns and investigations of potential inappropriate access to patient information, and writing investigatory reports.
Excellent computer skills (excel, electronic medical record navigation and understanding of accesses to the EMR.)
Prepares draft reports and recommends corrective actions clearly and concisely.
Assists the Director of Compliance Policy & Education with the proactive education program, such as developing educational material and presenting training and educational sessions to clinical and non-clinical staff.
Works collaboratively with hospital departments, and builds strong working relationships. Demonstrable project and time management skills, and effective verbal and written communication skills. Must be comfortable taking ambiguous work assignments and creating a clear and concise work product, with minimal level of guidance and direction. Able to independently manage multiple on-going complex projects.
Researches and understands compliance obligations of moderate complexity, including state and federal statutes and regulations. Is able to identify compliance risk areas and assists with the development and implementation of policies and corrective action plans where indicated.
The Privacy Specialist - Intermediate Conducts investigations and seeks/receives assistance/advice from team members, dependent upon complexity of cases.
The Privacy Specialist - Senior Conducts investigations involving greater complexity, analysis and advisory activities and with increased level of independence.
The Privacy Specialist – Intermediate has 4 or less years of prior relevant experience in a healthcare compliance or privacy program and/or senior level healthcare operations, with working knowledge of health laws and regulations, accreditation.
The Privacy Specialist – Senior has five (5) or more years of relevant experience in a healthcare compliance or privacy program and/or senior level healthcare operations, with working knowledge of health laws and regulations, accreditation.
Both will have:
- Bachelor's Degree in Business, Health Care Administration or related field or equivalent combination of education and work experience.
- Certification in healthcare privacy and/or compliance from a credentialing body such as HCCA, or other recognized institution, or willing to take the CHC-P exam and achieve certification no later than 24 months from hire date.)
- Has working knowledge of HIPAA, HITECH, and familiarity with healthcare and legal terminology.
- Ability to maintain confidentiality of sensitive and private information in accordance with applicable laws, policies and rules;
- Ability to plan, organize, and prioritize multiple tasks and work independently to meet deadlines and exercise sound professional judgment;
- Ability to work effectively with individuals at all levels and with varying backgrounds both within and outside the organization;
- Knowledge of and demonstrated ability to use logical, analytical, and problem-solving based methodologies to investigate complaints and concerns from patients, staff, faculty, and others, preferably experience in investigating privacy-related complaints and concerns.
- Ability to work independently with minimal supervision;
- Excellent organizational, written and verbal skills, with the ability to quickly analyze issues and craft practical, business-oriented solutions; Exceptional customer service, and presentation skills;
- Proficiency in all Microsoft office programs including Word, Excel, Outlook, and PowerPoint.
Clinical background and/or investigatory experience preferred. CHC and/or CHC-P certification. Knowledge and understanding of federal and state compliance and privacy program requirements and ability to plan and implement the elements of an effective compliance privacy program in relation to hospital and healthcare preferred. Proficient use of Epic® Electronic Medical Record System, Microsoft Excel® and Sharepoint® applications. Familiarity with Michigan Medicine’s policies and procedures, business processes, governance practices.
This position may be underfilled at a lower classification depending on the qualifications of the selected candidate.
A cover letter must accompany your resume.
Due to the COVID pandemic, this is temporarily a remote location
Michigan Medicine conducts background screening and pre-employment drug testing on job candidates upon acceptance of a contingent job offer and may use a third party administrator to conduct background screenings. Background screenings are performed in compliance with the Fair Credit Report Act. Pre-employment drug testing applies to all selected candidates, including new or additional faculty and staff appointments, as well as transfers from other U-M campuses.
Job openings are posted for a minimum of seven calendar days. The review and selection process may begin as early as the eighth day after posting. This opening may be removed from posting boards and filled anytime after the minimum posting period has ended.
U-M EEO/AA Statement
The University of Michigan is an equal opportunity/affirmative action employer.