DEPARTMENT: Compliance
RATE: $22.46 per hour, with potential for additional compensation based on qualifications.
POSITION SUMMARY:
The Privacy Associate assists the Compliance and Risk Management Officer (Privacy Officer) with Upper Peninsula Health Plan’s (UPHP’s) privacy program. This position ensures UPHP remains compliant with healthcare privacy rules and regulations.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
1. Follows established UPHP policies and procedures, objectives, safety standards, and sensitivity to confidential information.
2. Supports and coordinates day-to-day operations of UPHP’s privacy program; develops, maintains, and revises policies and procedures for the general operation of the privacy program and its related activities to ensure compliance with all rules and regulations.
3. Investigates all potential Health Insurance Portability and Accountability Act (HIPAA) breaches by conducting breach risk assessments; provides required notifications to identified parties and federal/state agencies; reviews reported disclosures.
4. Assists with all privacy related audits and inquiries.
5. Assists in developing training related to HIPAA and privacy and ensures that all staff receive initial, annual, and periodic training.
6. Collaborates on initiatives with the UPHP Security Administrator.
7. Attends conferences, seminars, and continuing education sessions as required.
8. Maintains confidentiality of client data.
9. Performs other related duties as assigned or requested.
POSITION QUALIFICATIONS:
Education:
Minimum:
Associate degree in business, health information management, healthcare administration, or related field
Preferred:
Bachelor’s degree in business, health information management, healthcare administration, or related field; HIPAA Privacy Officer certification or other relevant privacy/compliance certifications
Experience:
Minimum:
One (1) to two (2) years of experience in the health-care setting
Preferred:
Minimum plus experience conducting HIPAA risk assessments, managing privacy incidents, or working directly with regulatory audits or investigations.
Required Skills:
Working knowledge of MS Office (Word, Excel, PowerPoint, Access)
Keyboarding proficiency
Excellent human relation and oral, written and presentation skills
Excellent organizational abilities with attention to detail
Strong problem-solving skills; sound business judgment
Preferred Skills:
Knowledge of HIPAA regulations, Code of Federal Regulations (CFR) Title 45, and guidance from the Office for Civil Rights (OCR).
Familiarity with healthcare privacy and compliance frameworks.
The qualifications listed above are intended to represent the minimum skills and experience levels associated with performing the duties and responsibilities contained in this job description. The qualifications should not be viewed as expressing absolute employment or promotional standards, but as general guidelines that should be considered along with other job-related selection or promotional criteria.
Physical Requirements:
[This job requires the ability to perform the essential functions contained in the description. These include, but are not limited to, the following requirements. Reasonable accommodations may be made for otherwise qualified applicants unable to fulfill one or more of these requirements]:
Ability to enter and access information from a computer
Ability to access all areas of the UPHP offices
Occasionally lifts supplies/equipment
Occasional prolonged standing
Manual dexterity and mobility
Working Conditions:
Works in office conditions, but occasional travel may be required
Exposure to situations requiring exceptional interpersonal skills or periods of intense concentration
Subject to many interruptions
Occasionally subjected to irregular hours
