Health Information Privacy Investigator

Serves as a Privacy Officer and maintains up-to-date knowledge of federal and state privacy laws and HIPAA regulations.  

Acts as subject matter expert for the appropriate use and disclosure of PHI in accordance with all laws, regulations, policies, and other applicable guidelines. Provides advice and feedback to Advocate Health leaders on privacy-related questions and policies.  

Facilitates and coordinates privacy-related complaints and ensures thorough investigations in partnership with Department Leadership, Privacy-Compliance, Human Resources, Risk Management, Patient Portal Support, and other parties involved to respond to HIPAA concerns and issues. Submits completed investigation documentation to the Privacy-Compliance department.  

Collaborate with and follows up with various leadership to obtain the necessary information to complete investigations, runs Epic audit reports, and determines the type of privacy violation. Adheres to strict deadlines while ensuring detailed, thorough, and accurate investigation into all applicable concerns. Issues breach notifications in coordination with the Enterprise Privacy/Compliance department.  

Collaborates with HIM Data Integrity and other involved parties when Identity Theft/Fraud has been identified.  

Serves as an expert resource and educator for HIPAA and state privacy laws, provides timely guidance and support, and collaborates with leaders and team members across the region to help ensure compliant practices involving the use of PHI. Educates diverse audiences through presentations at leadership meetings as well as 1:1 and small-group educational opportunities.  

Serves as a point person for privacy-related issues at meetings and within work teams and communicates information appropriately to leadership.  

Attends quarterly Department meetings to report Privacy Statistics.

High attention to detail.  

Licensure, Registration, and/or Certification Required:

None Required.

Knowledge and understanding of HIPAA Privacy laws and ability to put them into practice.  

Ability to effectively investigate and resolve problems using critical thinking consistent with standards, practices, policies, procedures, regulations, and laws.  

Excellent verbal, listening, presentation, and written communication skills. Experience developing and sharing information through presentations required.  

Proficient knowledge in the use of electronic health records, data capture technology, Microsoft Office products such as Word, Excel, PowerPoint, Access and the use of virtual meeting technology.

This position requires travel, therefore, will be exposed to weather and road conditions.