Systemwide Privacy Officer

Purpose:

UPMC is looking for an experienced privacy leader to guide and advance our system-wide privacy strategy. The Systemwide Privacy Officer is responsible for the privacy program, including governance, regulatory compliance, data use, and protection of individual rights. The incumbent is responsible for developing, implementing and overseeing the organization's clinical privacy strategy. The role ensures compliance with the Privacy laws, drives data protection governance, manages risks and builds a culture around the responsible use and protection of data.

Functional area

s and disciplines of responsibility include: UPMC system-wide information privacy, special projects and accountabilities requested by the CCO.

If you're looking to bring your privacy expertise, strategic thinking, and leadership to a role with system-wide impact, we encourage you to apply and help shape the future of privacy across our organization!

Responsibilities:

+ Define and execute a comprehensive clinical privacy program aligned with business goals, regulatory requirements, and industry best practices.

+ Provide guidance and assist in the identification, implementation and maintenance of organization information privacy policies and procedures in coordination with organization management to comply with the Health Insurance Accountability Act of 1996, and other federal, and state privacy laws.

+ Co-chair or participate in, providing leadership on privacy, regulatory, and responsible-data-use matters.

+ Lead privacy risk assessments. Oversee initial and periodic information privacy risk assessments and assist in compliance monitoring activities in coordination with the entity's other compliance functions.

+ Work with the Office of Ethics and Compliance, and legal counsel to ensure the organization has and maintains appropriate privacy and confidentiality consent, authorization forms, and information notices and materials reflecting current organization and legal practices and requirements.

+ Develop and deliver privacy training and awareness programs in support of UPMC's clinical operation. Oversee and ensure delivery of initial and privacy training and orientation to all employees, volunteers, medical and professional staff, contractors, alliances, business associates, and other appropriate third parties.

+ Participate in the development, implementation, and ongoing compliance monitoring of all trading partner and business associate agreements, to ensure all privacy concerns, requirements, and responsibilities are addressed.

+ Define privacy requirements governing appropriate privacy related access to protected health information, in coordination with management, operations, Information Security, and Information Technology. Technical access controls, system administration, and security monitoring remain the responsibility of Information Security and Information Technology.

+ Work cooperatively with the HIM Directors and other applicable organization units in overseeing patient rights to inspect, amend, and restrict access to protected health information when appropriate.

+ Oversee the development and adherence to a process for receiving, documenting, tracking, investigating, and taking action on all complaints concerning the organization's privacy policies and procedures in coordination and collaboration with other similar functions and, when necessary, legal counsel.

+ Ensure compliance with privacy practices and consistent application of sanctions for failure to comply with privacy policies for all individuals in the organization's workforce, extended workforce, and for all business associates, in cooperation with Human Resources, administration, and legal counsel as applicable.

+ Initiate, facilitate, and promote…