Privacy Analyst

Senior Privacy Analyst – Contract Opportunity

Position Summary

• The Senior Privacy Analyst supports the Agency Privacy Officer in the day-to-day operation of the Agency’s privacy program. Reviews, tracks, coordinates, and documents privacy-sensitive requests and incidents involving Medicaid applicants, recipients, and beneficiaries; claims, eligibility, and enrollment information; provider and program integrity data; PHI; and PII.

Key Responsibilities

• Process and review individual access requests, information-gathering requests, recipient-directed disclosures, HIPAA authorizations, subpoenas and legal requests, privacy complaints, privacy incidents, and breach reporting activities.
• Apply HIPAA Privacy and Breach Notification requirements.
• Ensure compliance with Medicaid confidentiality requirements and regulations.
• Review requests and incidents for privacy risks and compliance concerns.
• Verify identity and authority while adhering to minimum necessary standards.
• Conduct remote and onsite privacy assessments and follow escalation procedures.

Program Support & Audit Participation

• Assist with development, implementation, maintenance, and documentation of the Agency privacy program.
• Participate in audits conducted by SSA, IRS, HHS, CMS, OCR, State Examiner’s Board, and other oversight agencies.

Knowledge, Skills & Abilities

• Working knowledge of HIPAA Privacy Rule and Breach Notification requirements.
• Knowledge of Medicaid confidentiality requirements, including 42 CFR Part 431, Subpart F.
• Understanding of 42 CFR Part 2 considerations.
• Experience reviewing subpoenas, court orders, HIPAA authorizations, access requests, and privacy incident reports.
• Strong analytical, documentation, compliance, and problem-solving skills.

Regulatory Knowledge Areas

• HIPAA Privacy Rule
• HIPAA Breach Notification Rule
• Medicaid Confidentiality Requirements
• 42 CFR Part 431, Subpart F
• 42 CFR Part 2
• PHI and PII Protection Standards
• Minimum Necessary Standard
• Identity and Authority Verification Requirements