Privacy And Compliance Officer

This position is responsible for overseeing the BHAs Privacy and Compliance areas. The purpose of the position is to enhance and protect the BHAs vision mission and values by providing risk-based and objective assurance advice and insight to individual Offices within the BHA in regard to compliance with state and federal laws and regulations as well as BHA policies and procedures that govern privacy and other compliance areas. This position administers a BHA-wide Privacy program that targets BHA divisions/office staff business associates and trading partners (Example: OIT HCPF COAG outside vendors stakeholders) and is designed so that staff are knowledgeable of BHA and legal requirements for protecting the privacy of confidential information and for instituting policies procedures forms and other materials that support this effort via training and enforcement.

In accordance with the Health Insurance Portability and Accountability Act (45 CFR Section 164.530) and other state and federal privacy and security regulations this position serves as the BHAs BHA Privacy & Compliance Officer. The BHA Privacy & Compliance Officer is a high-level resource in the area of privacy for the BHA. The BHA Privacy & Compliance Officer oversees monitors and advises on all ongoing activities related to the development implementation maintenance of and adherence to the BHAs policies and procedures covering the privacy and access to protected information in compliance with federal and State laws and the BHAs information privacy practices. The BHA Privacy & Compliance Officer highlights any concerns related to these areas and their associated risks to the BHA. This position serves as the point position for BHAs compliance with privacy requirements for protected and confidential information. This position works with directors and program managers in managing the implementation of statutory changes affecting the BHA. This position facilitates business associate agreements security agreements. research requests and projects and data protection agreements as well as overseeing investigations of potential privacy breaches and violations and representing the agency and its policies and practices related to privacy. This position provides technical assistance in relation to the areas described above.

The BHA Privacy & Compliance Officer is the authority for the implementation and ongoing privacy compliance for the Behavioral Health Administration. This requires a high level of knowledge and expertise in the privacy field needed by the agency to support its overall mission. As the privacy senior authority the position is authorized to take action and issue expert opinions that provide direction for further action by others; design strategy systems processes guidelines rules and standards that are mission critical and directly impact the agencys ongoing operation and broad program or policy; and maintain the leadership role in the administration of a privacy program that ensures the protection of confidential information maintained by other divisions and offices.

Such responsibilities include administering a program that assures compliance with federal State and local laws related to privacy and confidentiality; chairing and/or providing leadership to appropriate boards and committees as relates to privacy; serving as the BHA liaison to regulatory and accrediting bodies for matters relating to privacy; developing and administering enterprise privacy policies; collaborating with BHA and division staff for developing implementing and administering division/office procedures; devising a monitoring system for all divisions and offices that provides timely privacy status information with corrective actions; receiving and addressing complaints from clients and staff relative to possible violations of privacy practices. To administer such a program the Data BHA Privacy & Compliance Officer works closely with the BHAs Division Directors.

This position has a high-level responsibility for advising the BHA on privacy compliance and other privacy issues derived from privacy laws. The BHA Privacy & Compliance Officer provides guidance to the organization that minimizes data privacy risks ensures compliance with arising data protection issues and ensures the confidentiality and protection of data.

• Provides technical assistance in establishing data protection policies and behaviors of staff and management throughout the organization including interactions with other local State and federal agencies.

• Provides technical expertise regarding the BHAs implementation of HIPAA and other privacy/data protection/information legislation within the State and on a local level.

• Develops and maintains BHA privacy policies procedures and tools consistent with state and federal privacy statutes.

• Reviews and monitors (sometimes in conjunction with the Attorney Generals Office OSC Contracting Division etc.) BHA business associate data protection security agreements for completeness and compliance with State and federal statutes and internal policy.

• Coordinates and works closely with BHA staff to improve compliance throughout the BHA.

• Reports to the U.S. Department of Health and Human Services Secretary concerning agencys level of compliance with standards and legislation mandates.

• Maintains logs and documentation of findings within the BHA as well as with division/office business associates including compliance and non-compliance issues along with recommendations for remediation and/or mitigation of non-compliance issues.

• Serves as point person in responding to breaches specifically proper response overseeing notifications when appropriate and communicating with the Attorney Generals office and the U.S. Department of Health and Human Services as appropriate.

• Creates and conducts educational and ongoing awareness programs for the BHA workforce including Divisional HIPAA liaisons as identified by Division Directors. Provides initial and ongoing training for all staff on privacy requirements based on State and federal laws that protect health information. Provides updated training as necessary based on changes in laws and/or BHA policies.

• Monitors to assure that employees complete required training. Answers employee questions. Evaluates current business practices to determine level of staff understanding and adjust training efforts to meet the needs of staff. Updates training modules as new requirements are disseminated.

• Attends BHA and outside training offerings in order to keep current with the latest requirements and to share agency experiences that have enhanced the privacy program with other agencies.

• Regularly communicates with programs BHA employees and other agencies to ensure awareness and compliance with the latest information on BHA policies and procedures and state and federal law; potential vulnerabilities and risks; best practices in safeguarding protected information; and continually reinforcing the importance of maintaining the privacy and security of client and other data.

• Advises the Communication Officer and DC of Administration in addressing all privacy topics on behalf of the BHA.

• Assists in responding to media inquiries and interviews directed at privacy issues.

• Develops and implements communications on BHA privacy awareness and compliance.

• Assists and guides BHA staff with communication materials to target specific program privacy needs.

• Assists with public relations matters affecting privacy.

Other duties:

Perform additional duties related to data privacy. Examples include but are not limited to:

• Assists in developing standard operating procedures and guidelines and provides technical assistance to internal and external staff on privacy issues affecting the BHA.

• Provides analysis training and technical assistance to staff while assisting key managers with rules changing processes and working with other external entities behavioral health providers to ensure initial and ongoing compliance.

• Represents the BHA on state and federal legislation issues related to compliance with privacy regulations.

• Prepares materials as required by the BHA and the legislature when requesting funds justifying current funding and for ensuring compliance with state and federal privacy laws.

A combination of related education (associates or bachelors degree) and/or relevant experience in an occupation related to the work assigned equal to seven (7) years in all of the following areas:

• HIPAA compliance and data standards including data privacy
• Federal and state statutory/legislative requirements
• Developing and maintaining privacy and compliance program documentation and processes
• Strong collaboration skills

• Managing data sharing/use agreements
• Assessing third-party vendor privacy risks
• Experience training on HIPAA compliance for various staff at all levels

• This position is delegated as a hybrid position. The employees must maintain a home office and workstation free of distraction.
  internet and possibly phone to complete required job duties or report to the office when needed.
• Standard Background Name check TRAILS CMS and JBITS
• Current/Valid and unrestricted US Drivers License
• The position is to travel to meetings and/or conferences as needed.
• Former State employees who were disciplinarily terminated or resigned in lieu of termination must disclose the information on the application and provide an explanation why the prior termination or resignation should not disqualify the applicant from the current position. Absent extraordinary circumstances prior disciplinary termination or resignation in lieu of termination will disqualify the applicant from future State employment with CDHS.