University Hipaa And Privacy Officer

Profile

University HIPAA and Privacy Officer
Duties: Serves as the University's HIPAA (Health Insurance Portability and Accountability Act) Privacy Officer and conducts other general university compliance activities as directed. Overall responsibility for the compliance and operational aspects of developing, implementing and administering the University of HIPAA Compliance Program, including but not limited to development, oversight, and coordination of HIPAA compliance policies, procedures, and training for all covered entities and covered healthcare components. Interprets and clarifies complex regulations and stays current on regulatory changes. level management position that reports to the Chief Resilience Officer and Associate Vice President of Safety and Risk Services and has direct access to senior leadership through the university Strategic Enterprise Risk Management and Compliance (SERMC) Committee. Develop and Maintain a University-Wide HIPAA Compliance Program: Develop, oversee, and review annually written institutional HIPAA policies, procedures, and guidance, and associated changes, and ensure their integration and consistency with applicable federal and state laws, regulations, and standards as well as compliance and coordination with other privacy laws, regulations, and policies (e.g., FERPA, Oregon privacy laws, UO policies); Develop and implement HIPAA compliance training and orientation to faculty, staff, volunteers, and contractors operating in units with HIPAA obligations. Provide coordination between all units that engage in HIPAA-covered activities and provide ongoing guidance to campus constituents; Establish and maintain a university-wide compliance monitoring system and work closely with the HIPAA privacy officer in the University Health Center, the Chief Information Security Officer, and other points of contact in units with HIPAA obligations; Monitor campus units' work and eligibility for hybrid and non-hybrid status and recommend revisions to hybrid declaration at least annually. Work collaboratively with UO offices that provide support to campus units such as General Counsel, Information Services, Purchasing and Contracting, Internal Audit, Research Compliance Services, and the Registrar, to ensure the university's consent forms, authorization forms, business associate agreements, notices and other documents are in compliance with applicable requirements and practice standards. Participating in the development, implementation, and ongoing compliance monitoring of all business associate agreements; Maintain records pertaining to HIPAA policies and procedures, Notices of Privacy Practices, and all HIPAA-related educational materials that are developed and implemented, and ensure that they remain current; Work collaboratively with campus units on the development of new university programs that depend on HIPAA compliance; Develop, coordinate, and chair the HIPAA Coordination Council; Direct HIPAA-Related Compliance Monitoring and Investigation Functions: Perform periodic privacy risk assessments and conduct related ongoing compliance monitoring activities in coordination with all covered entities, covered healthcare components, and personnel embedded in units with HIPAA obligations. Develop procedures, protocols, and/or measures to minimize those risks; Develop and lead processes for HIPAA-specific compliance monitoring, units' internal routine monitoring, and breach investigations; Establish, administer, and serve as the designated contact person for receiving, documenting, investigating, and taking action on HIPAA complaints; Create and implement a HIPAA complaint process in coordination with the Office of Internal Audit; Maintain required records for HIPAA complaints, breach notifications, and sanctions; Be responsible for integration of HIPAA privacy with other privacy obligations (e.g., FERPA, Oregon privacy law, and applicable UO policies). Provide development guidance and assist in the identification, implementation, and maintenance and updating of university privacy and security policies the HIPAA-specific program is underway, the Privacy Officer will also focus on other institutional privacy and compliance issues beyond HIPAA. Compliance and Privacy-Related Functions: Participate in professional development as needed to maintain knowledge of evolving regulations. Advance university interests through engagement with external privacy and security organizations as necessary; Respond to questions about disclosure of records, and work closely with the university's data custodians; Provide leadership in the development, implementation, and promotion of privacy awareness programs and initiatives; Participate with the General Counsel, Chief Resilience Officer and the SERMC in coordinating university-wide compliance efforts and policies in such areas as, research, disability services, public safety, student and general data security, etc.; Assist in assuring annual and/or periodic compliance reporting by various departments and operations as required by law; Assist in monitoring and coordinating compliance efforts and training with various departments and operations; Liaise with Research Compliance Services and the Institutional Review Board; and Work with the offices of Government and Community Affairs, General Counsel, and others to represent the university's information privacy interests with external parties (e.g., federal, state, or local government bodies) who seek to adopt or amend privacy legislation, regulations, or standards; Other duties as assigned. Serve as a Primary Liaison to Information Services with Regard to HIPAA and Privacy: In conjunction with IT security personnel, conduct periodic HIPAA-related information privacy and security risk assessments for alignment between security and privacy practices; In collaboration with IT security, coordinate and monitor mechanisms to track access to protected health information, within the purview of the university's operations and as required by law, regulations and policies; and Review all system-related information security plans throughout the organization's network to ensure alignment between security and privacy practices. Serve on Data Security Incident Response Team.

Company info

Sign Up Now - MiamiCrossing.com