Privacy Analyst

Privacy Analyst 

Bring your passion to Texas Health so we are Better + Together

Work Location: Texas Health Corporate, 612 E. Lamar Blvd., Arlington, TX 76011

Work Hours: Full-Time Days – 40 hours per week with flexible scheduling. Hybrid work arrangement requiring a minimum of 1 in-office day per week

What You Will Do: 

Investigations, Monitoring, Auditing, and Enforcement
. Conduct access audits related to electronic medical records (EMRs) and other ancillary PHI systems.
. Identify questionable EMR access patterns through analysis of proactive auditing reports.
. Investigate and document privacy-related matters, escalating complex or high-risk matters to the Privacy Manager for joint oversight, ensuring thorough analysis, documentation, and resolution in accordance with regulatory and organizational standards. 
. Conduct intake and initial assessment of privacy incidents, evaluate breach potential through structured risk assessments, and support breach response activities, including documentation, mitigation, and patient and regulatory notification when required. 
. Conduct on-site walkthroughs and audits at various entities to assess compliance with HIPAA privacy standards and organizational policies.

Reporting and Metrics
. Collect, analyze, and synthesize privacy-related data and metrics to develop reports for department use, leadership, and committees. 
. Assist in the identification of additional reports needed from the EHR system (CareConnect) to detect breaches and support the development of focused audits.

Communication, Training, and Awareness
. Respond to questions from employees, patients, and consumers related to HIPAA, privacy policies, breach reporting, restrictions, confidential data transfers of PHI and PII, amendment requests, etc.
. Develop privacy related communications and create, deliver, and track privacy training programs.
. Develop, review and update privacy policies, procedures, guidance documents, and standard operating procedures to ensure alignment with HIPAA and other applicable privacy regulations.
. Assist with implementation of procedures to ensure compliance with Privacy-related policies. 

Organization and Oversight
. Work collaboratively with IT Security, Legal, Human Resources, and other internal stakeholders to address privacy-related concerns, inquiries, and investigations.
. Participate in privacy-related projects and work plans items.
. Support and assist the Privacy Program Manager and System Privacy Officer, as needed, in developing and implementing privacy program initiatives and responding to potential privacy incidents.
. Remain current with federal and state privacy laws and regulations; support compliance monitoring efforts and recommend program enhancements based on regulatory changes. 
. Perform other duties as assigned.