Privacy Compliance Consultant

Your Role
The Privacy Office team is tasked with the development, execution, and supervision of Blue Shield's Privacy Program.

This program guarantees that Blue Shield and its associated covered entities adhere to state and federal privacy statutes and regulations, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Health Information Technology for Economic and Clinical Health Act of 2009 (HITECH), and California's Confidentiality of Medical Information Act (CMIA).

The Privacy Program Consultant will report to the Privacy Office Manager or the Director.

In this capacity, you will play a vital role in the Privacy Office's ongoing efforts to enhance and enforce Blue Shield's Privacy Program.

Your Responsibilities
In this position, you will:

• Oversee Blue Shield's adherence to state and federal privacy regulations, including the privacy aspects of HIPAA and HITECH.
• Design and implement training programs for workforce members on privacy matters, address privacy inquiries, conduct investigations into potential privacy breaches, perform privacy assessments, manage privacy-related contracts, and monitor Business Associate vendor compliance with privacy standards.
• Serve as a subject matter expert for business units on privacy issues.
• Investigate, document, and respond to privacy complaints and incidents reported to the Privacy Office.
• Lead privacy investigations, ensuring mitigation, identifying root causes of incidents, and collaborating with affected business and operational teams to develop and execute corrective action plans to remediate privacy violations and minimize recurrence risks.
• Assist in evaluating and determining the appropriateness of requests from workforce members to disclose Protected Health Information (PHI) to third parties or to permit third parties to access, use, or disclose Blue Shield PHI; review requests for minimum necessary determinations and verify the existence of appropriate authorizations and/or contractual documentation.
• Support individuals contacting the Privacy Office with privacy-related concerns, complaints, or allegations of privacy violations; provide guidance and expertise to other Privacy Office team members as needed.
• Assist in the timely creation, review, revision, and updates of privacy policies, procedures, resource guides, job aids, and other educational materials.
• Perform additional privacy-related duties as required.

Your Qualifications
Requires a bachelor's degree or equivalent experience.
Requires a minimum of 7 years of relevant experience.
At least 5 years of experience related to privacy in healthcare data is preferred.
IAPP CIPP/US Certification or HCCA, CHPC Certification is preferred.
Comprehensive knowledge of state and federal privacy laws, including HIPAA/HITECH, CMIA, and consumer protection laws related to privacy, such as the Telephone Consumer Protection Act (TCPA) is required; familiarity with Department of Health Care Services (DHCS) privacy requirements for Medi-Cal Managed Care Health Plans and Centers for Medicare and Medicaid (CMS) is preferred.

Compensation Range:
The compensation range for this role is $109,120.00 to $163,680.00 for California.

Note:

This range represents the compensation range for this and various other positions at Blue Shield that fall within this pay grade. Blue Shield salaries are determined based on multiple factors, including the candidate's experience and current employee salaries for similar roles.

---