Medical Data Privacy & Compliance Officer; PDPL

The Medical Data Privacy & Compliance Officer (PDPL) is a strategic executive role dedicated to ensuring the organization’s adherence to all applicable data privacy regulations, guidelines, and policies within the healthcare sector. This position requires an intricate understanding of the complexities surrounding patient data protection, compliance frameworks, and risk management. The PDPL will lead comprehensive audits, establish best practices, and cultivate a culture of privacy and compliance throughout the organization.

The ideal candidate will demonstrate profound expertise in health information management, a discerning ability to communicate complex regulatory requirements to diverse stakeholders, and a commitment to fostering an environment where ethical standards meet operational excellence. Engaging cross‑functionally with senior leadership, the PDPL will champion initiatives that bolster patient trust and align operational protocols with legislative mandates while also navigating the evolving landscape of data privacy in healthcare.

• Minimum of 15 years of progressive experience in data privacy, compliance, or risk management within a healthcare or pharmaceutical setting.
• Demonstrated expertise in international, federal, and state data privacy regulations, particularly HIPAA, GDPR, and CCPA, and their applications in healthcare environments.
• Proven track record of developing, implementing, and maintaining comprehensive policies and procedures to safeguard patient data and ensure compliance with applicable regulations.
• Experience leading cross‑functional teams and fostering collaboration across departments to instill a compliance‑oriented culture within the organization.
• Extensive knowledge of medical record management and electronic health record systems, including their security and privacy implications.
• Strong analytical skills with a capacity to assess complex data privacy issues, anticipate risks, and implement risk mitigation strategies effectively.
• Exceptional communication and presentation abilities, capable of conveying intricate compliance concepts to diverse audiences, including board members, clinical staff, and external regulators.
• Capacity to develop and oversee training programs that enhance organizational awareness of data privacy principles and compliance requirements.
• Familiarity with data breach response protocols, including incident management, investigation procedures, and regulatory notification requirements.
• Strong leadership skills, with a history of mentoring and developing staff in compliance roles and building high‑performing teams.
• Advanced understanding of technologies and trends impacting healthcare data privacy, including cloud computing, AI, and big data analytics.
• Collaborative mindset with a focus on building relationships with key stakeholders, including legal counsel, IT, and clinical leadership, to achieve privacy and compliance objectives.
• A Master’s degree in Healthcare Administration, Law, Information Technology, or a related field.
• Professional certifications such as Certified Information Privacy Professional (CIPP);
  Certified in Healthcare Compliance (CHC) or equivalent are highly desirable.

• Lead the development, execution, and continuous enhancement of the organization’s data privacy compliance strategy and program.
• Serve as the primary point of contact for all inquiries related to data privacy, regulatory compliance, and policy interpretation.
• Conduct regular audits and assessments of data privacy practices across all departments to identify potential gaps and recommend remedial actions.
• Design and implement robust training and educational programs for staff at all levels, ensuring alignment with best practices in data privacy and compliance.
• Collaborate with IT and cybersecurity teams to ensure the integrity, availability, and confidentiality of health information systems and data processes.
• Manage the organization’s data breach response strategy, ensuring adherence to regulatory obligations and internal protocols.
• Engage with healthcare regulators, industry groups, and external stakeholders to keep abreast of evolving…