Privacy Analyst, Legal Team

<div class="content-intro"><p>Datavant is the data collaboration platform trusted for healthcare. Guided by our mission to make the world’s health data secure, accessible and actionable, we provide critical data solutions for organizations across the healthcare ecosystem - including providers, health plans, researchers, and life sciences companies. From fulfilling a single patient’s request for their medical records to powering the AI revolution in healthcare, Datavanters are building the future of how data is connected and used to improve health. <br><br>By joining Datavant today, you’re stepping onto a driven and highly collaborative team that is passionate about creating transformative change in healthcare.</p></div><h3><strong>Role Summary</strong></h3> <p>Under the direction of the Vice President of Provider Privacy Strategy and Compliance, the Privacy Analyst will be responsible for investigating and determining the nature of reported HIPAA incidents, analyzing the root cause, recommending mitigation and corrective actions, and providing guidance on privacy and compliance best practices to minimize future risk. You will also communicate regularly with Datavant’s Provider Operations team and healthcare provider customers. This role calls for a detail-oriented professional with a strong passion for healthcare privacy, extensive experience leading investigations, and the ability to clearly communicate complex regulatory requirements.</p> <h3> </h3> <h3><strong>Key Responsibilities</strong></h3> <p><strong>Incident Management Investigation</strong></p> <ul> <li>Lead end-to-end investigation of reported HIPAA incidents, determining scope, impact, and required remediation steps</li> <li>Follow, refine, and maintain standardized investigation protocols to ensure consistent, thorough incident response</li> <li>Track incidents from identification through resolution, maintaining comprehensive documentation</li> <li>Analyze patterns across incidents to identify systemic issues and opportunities for process improvement</li> </ul> <p><strong>Process Development Improvement</strong></p> <ul> <li>Conduct root cause analysis for privacy incidents and implement corrective action plans</li> <li>Develop, document, and maintain privacy-related standard operating procedures and policies as needed</li> <li>Identify and recommend technology and process improvements to prevent recurring incidents</li> <li>Establish metrics to measure the effectiveness of privacy controls and remediation efforts</li> </ul> <p><strong>Communication Documentation</strong></p> <ul> <li>Draft clear incident notifications to affected healthcare organizations, and prepare correspondence for impacted individuals and regulatory bodies as needed</li> <li>Prepare comprehensive incident summaries and root cause analyses</li> <li>Document privacy decisions and rationales to support compliance requirements</li> <li>Collaborate to develop privacy educational materials to improve privacy awareness and compliance enterprise-wide</li> </ul> <p><strong>Cross-Functional Collaboration</strong></p> <ul> <li>Partner with operations, customer service, legal, and security/IT teams to address privacy concerns</li> <li>Provide timely, accurate guidance on information release in accordance with regulations</li> </ul> <p><strong>Continuous Improvement Education</strong></p> <ul> <li>Stay current on evolving privacy requirements and industry best practices</li> <li>Recommend targeted mitigation and corrective action based on identified gaps</li> <li>Participate in privacy-focused professional development opportunities</li> <li>Contribute to the development of privacy training materials and awareness campaigns</li> </ul> <h3><strong>Basic Qualifications</strong></h3> <ul> <li>Bachelor’s degree </li> <li>Strong knowledge of and experience with HIPAA, privacy, and security compliance</li> <li>Exceptional writing, grammar, and communication skills.</li> <li>Experience conducting investigations, ... (truncated, view full listing at source)