Privacy Specialist

Overview About This Role Hybrid: 3 day in office 2 day remote.

The Privacy Specialistsupports the organization's enterprise privacy program by ensuring compliance with HIPAA, CFR Part 2, other federal and state privacy laws, and internal privacy requirements. This position is responsible for conducting privacy risk assessments, investigating privacy incidents and complaints, supporting regulatory compliance activities, managing privacy related requests, delivering workforce education, and collaborating with business partners to integrate privacyby design principles into organizational processes.

The Privacy Specialistsupports the organization's enterprise privacy program by ensuring compliance with HIPAA, CFR Part 2, other federal and state privacy laws, and internal privacy requirements. This position is responsible for conducting privacy risk assessments, investigating privacy incidents and complaints, supporting regulatory compliance activities, managing privacy related requests, delivering workforce education, and collaborating with business partners to integrate privacyby design principles into organizational processes.

At Acadia, we exist to Lead Care with Light. Every day, our teams help improve lives, inspire hope, and elevate communities through compassionate behavioral healthcare.

We value your expertise and dedication—and we invest in your success.

• Competitive Base Salary commensurate with experience
• Comprehensive Medical, Dental, and Vision Insurance
• 401(k) Plan with Company Match
• Paid Time Off (PTO) and recognized holidays
• Company-paid Basic Life and AD&D Insurance
• Employee Assistance Program (EAP) and mental wellness resources
• Opportunities for professional growth and advancement within Acadia’s nationwide network

Investigate privacy complaints, incidents, reports, and potential security events.

• Determine whether a HIPAA violation or reportable breach has occurred and support notificationactivitiesas necessary.

• Maintain auditready documentation and investigation records.

• Support the development, implementation, and maintenance of the organization's privacy program.

• Review and update privacy policies, standards, procedures, workflows, Data Use Agreements, access requests, and other business practices toidentifyprivacy risks, and support appropriate use, disclosure, access, and safeguarding of protected health information.

• Monitor regulatory developments and emerging privacy requirements.

• Assistin privacy audits, monitoring activities, and corrective action plans.

• Analyze privacy trends and recommend risk mitigation strategies.

• Collaborate with Legal, Compliance, Information Security, IT, HIM, Clinical, and Operations teams to embed privacybydesign principles.

• Participate in vendor andthirdpartyprivacy reviews.

• Support data mapping, records management, data retention, and information governance initiatives.

• Support patient andindividualprivacy requestprocessesincluding access, amendments, restrictions, and related inquiries.

• Develop and deliver privacy education and awareness training programs.

• Assistinthe facility sitevisitprocess

• Assistin Acadia Healthcare Identity Governance

• Other duties as assigned

• Bachelor’s degree in a related field or equivalent combination of education and experience.
• Knowledge of HIPAA, HITECH, and healthcare privacy requirements.
• Strong analytical, investigative, organizational, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to manage sensitive and confidential information with discretion.

• CHPS, CHC, CHPC, CIPP, or similar certification preferred.
• 1-2 years of healthcare privacy, compliance, auditing, investigations,…