Apply Now Clicking "Apply Now" opens the link in a new window.

Job Summary

The Privacy Specialist independently manages a portfolio of privacy-related complaints and investigations to ensure they are handled appropriately, thoroughly and in a timely fashion.  Gathers facts by conducting medical record reviews, system audit log reviews, Internet searches, regulation searches, interviews, and liaising with other department management as needed.   Uses active listening and customer service experience to manage difficult conversations, especially with patients exercising their privacy rights. Provides written communications and reports to supervisors, Human Resources, etc. and makes recommendations for corrective action plans.

Mission Statement

Michigan Medicine improves the health of patients, populations and communities through excellence in education, patient care, community service, research and technology development, and through leadership activities in Michigan, nationally and internationally.  Our mission is guided by our Strategic Principles and has three critical components; patient care, education and research that together enhance our contribution to society.

Responsibilities*

  • Actively participates in the electronic medical record monitoring program by conducting audits of accesses to the EMR system(s), identifying and evaluating clinical association patterns, investigating potential inappropriate access to patient information. Writes clear, concise and detailed summary investigation reports regarding findings, etc.
  • Assists with the proactive privacy education program by developing educational materials, presenting training and educational sessions to workforce members, including audiences of physician and higher leadership personnel.
  • Works collaboratively and builds strong working relationships other departments’ personnel.
  • Analyzes, compares and evaluates various courses of action and is able to make independent decisions on matters of significance, free from immediate direction and within scope of responsibilities.
  • Primary activities and decision making authority are predominantly performed independently, including situations that affect business operations to a substantial degree.
  • Reviews business practices, identifies and recommends corrective actions/solutions, and provides necessary follow up and oversight to assure implementation.
  • Resolves issues involving greater complexity, identifies solutions and works independently with little guidance
  • Independently conducts investigations and manages cases involving greater complexity and analysis.
  • Comfortable with assignments involving ambiguous information, identifying pertinent details, and creating a clear and concise work product, with minimal level of guidance and direction.
  • Researches and understands compliance obligations involving basic and moderate complexity, including state and federal statutes and regulations.
  • Develops and implements policies and corrective action plans.
  • Provides guidance to Intermediate and Associate team members on matters of greater complexity.

Required Qualifications*

  • Bachelor's Degree in Business, Health Care Administration or related field or equivalent combination of education and work experience. Certification in healthcare privacy and/or compliance from a credentialing body such as HCCA, or other recognized institution, or willing to take and pass the CHC-P exam and achieve certification no later than 24 months from hire date.)
  • Experience maintaining confidentiality of sensitive and private information.
  • Meticulously able to follow policy and procedures, and extremely detail-oriented.
  • Ability to quickly analyze facts and circumstances, identify issues, and craft practical, business-oriented solutions.
  • Demonstrable project and time management skills, ability to manage multiple ongoing projects and a heavy workload, and excellent organizational skills.
  • Ability to plan, organize, and prioritize multiple tasks and work independently to meet deadlines and exercise sound professional judgment.
  • Experience with and able to work effectively with individuals at all levels and with varying backgrounds both within and outside the organization.
  • Experience with and demonstrated success using logical, analytical, and problem-solving based methodologies to investigate complaints and concerns from patients, workforce members, and others, preferably with experience investigating privacy-related complaints and concerns.
  • Exceptional written and verbal communication skills.
  • Exceptional customer service experience.
  • Proficiency in all Microsoft® office applications.
  • Ability to work independently with minimal supervision and manage highly complex issues/cases.
  • Ability to plan, organize, and prioritize multiple tasks and work independently to meet deadlines and exercise sound professional judgment.

The Privacy Specialist Senior

  • Minimum 5 years of relevant experience, preferably in a healthcare compliance or privacy program and/or senior level healthcare operations, with working knowledge of HIPAA, HITECH and other relevant health laws and regulations and familiarity with healthcare and legal terminology.

The Privacy Specialist Intermediate 

  • 2-4 years of prior relevant experience, preferably in a healthcare compliance or privacy program and/or senior level healthcare operations, with basic knowledge of HIPAA, HITECH and other relevant health laws and regulations and familiarity with healthcare and legal terminology.

Desired Qualifications*

  • Clinical background, experience auditing electronic medical record systems for inappropriate access, and/or investigatory experience preferred.
  • Knowledge and understanding of federal and state compliance and privacy program requirements.
  • Exceptional experience using and/or conducted audits of access to the Epic® Electronic Medical Record System, and proficient with using Microsoft Excel® and Sharepoint® applications.
  • CHC and/or CHC-P certification.
  • Familiarity with Michigan Medicine’s policies and procedures, business processes, governance practices.

Underfill Statement

This position may be underfilled at a lower classification depending on the qualifications of the selected candidate.

Additional Information

  • A cover letter must accompany your resume.
  • Due to the COVID pandemic, this is temporarily a remote location

Background Screening

Michigan Medicine conducts background screening and pre-employment drug testing on job candidates upon acceptance of a contingent job offer and may use a third party administrator to conduct background screenings.  Background screenings are performed in compliance with the Fair Credit Report Act. Pre-employment drug testing applies to all selected candidates, including new or additional faculty and staff appointments, as well as transfers from other U-M campuses.

U-M EEO/AA Statement

The University of Michigan is an equal opportunity/affirmative action employer.