Privacy Analyst

Nemours - Talleyville, DE

Full-time

Remote - Talleyville, DE

Hospitals

About the position

The Privacy Analyst at Nemours Children's Health is responsible for supporting the organization's information privacy practices and initiatives. This remote position involves analyzing complex privacy scenarios, implementing privacy training and procedures, and ensuring compliance with privacy laws and regulations. The role is critical in maintaining the confidentiality of patient and business associate information while promoting good information stewardship across the organization.

Responsibilities

• Champion good information stewardship and privacy practices across Nemours.
• Identify, investigate, and resolve privacy violations involving a breach of information.
• Maintain accurate records of investigations and requests in the case management system.
• Support the implementation of privacy laws, regulations, and best practices.
• Provide analytical support for the Privacy Office, under the direction of the Manager, Privacy, and act as a liaison to the enterprise.
• Review legal contracts (e.g., business associate agreements, data use agreements, etc.) to ensure compliance with federal and state regulations.
• Initiate and conduct activities to create information privacy and security awareness and education within the enterprise.
• Support the development and implementation of privacy policies, standards, and procedures for the Nemours workforce.
• Analyze and monitor privacy compliance and produce reports necessary to properly manage the privacy program.
• Perform additional miscellaneous duties and responsibilities as assigned by the associate's manager.

Requirements

• Bachelor's Degree is required or at least 5 years of progressively increasing responsibility and experience in privacy, health care privacy compliance, or legal departments in lieu of a degree.
• Certified Information Privacy Professional (CIPP), Certified in Healthcare Privacy Compliance (CHPC), or Healthcare Certified Information Security and Privacy Professional (HCISPP) required at the time of hire or within the first three months in the position.
• Minimum of 3 years of progressively increasing responsibility and experience and/or education in health care privacy or related legal studies.