Privacy Specialist

Overview

The Privacy Specialist supports the organization's enterprise privacy program by ensuring compliance with HIPAA, CFR Part 2, other federal and state privacy laws, and internal privacy requirements. This position is responsible for conducting privacy risk assessments, investigating privacy incidents and complaints, supporting regulatory compliance activities, managing privacy related requests, delivering workforce education, and collaborating with business partners to integrate privacy by design principles into organizational processes.

The Privacy Specialist supports the organization's enterprise privacy program by ensuring compliance with HIPAA, CFR Part 2, other federal and state privacy laws, and internal privacy requirements. This position is responsible for conducting privacy risk assessments, investigating privacy incidents and complaints, supporting regulatory compliance activities, managing privacy related requests, delivering workforce education, and collaborating with business partners to integrate privacy by design principles into organizational processes.

At Acadia, we exist to Lead Care with Light. Every day, our teams help improve lives, inspire hope, and elevate communities through compassionate behavioral healthcare.

We value your expertise and dedication—and we invest in your success.

• Competitive Base Salary commensurate with experience
• Comprehensive Medical, Dental, and Vision Insurance
• 401(k) Plan with Company Match
• Paid Time Off (PTO) and recognized holidays
• Company-paid Basic Life and AD&D Insurance
• Employee Assistance Program (EAP) and mental wellness resources
• Opportunities for professional growth and advancement within Acadia’s nationwide network

Investigate privacy complaints, incidents, reports, and potential security events.

• Determine whether a HIPAA violation or reportable breach has occurred and support notification activities as necessary.

• Maintain audit ready documentation and investigation records.

• Support the development, implementation, and maintenance of the organization's privacy program.

• Review and update privacy policies, standards, procedures, workflows, Data Use Agreements, access requests, and other business practices to identify privacy risks, and support appropriate use, disclosure, access, and safeguarding of protected health information.

• Monitor regulatory developments and emerging privacy requirements.

• Assist in privacy audits, monitoring activities, and corrective action plans.

• Analyze privacy trends and recommend risk mitigation strategies.

• Collaborate with Legal, Compliance, Information Security, IT, HIM, Clinical, and Operations teams to embed privacy by design principles.

• Participate in vendor and third party privacy reviews.

• Support data mapping, records management, data retention, and information governance initiatives.

• Support patient and individual privacy request processes including access, amendments, restrictions, and related inquiries.

• Develop and deliver privacy education and awareness training programs.

• Assist in the facility site visit process

• Assist in Acadia Healthcare Identity Governance

• Other duties as assigned

• Bachelor’s degree in a related field or equivalent combination of education and experience.
• Knowledge of HIPAA, HITECH, and healthcare privacy requirements.
• Strong analytical, investigative, organizational, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to manage sensitive and confidential information with discretion.

• CHPS, CHC, CHPC, CIPP, or similar certification preferred.
• 1-2 years of healthcare privacy,…