ANALYST II

Analyst II - Privacy Officer

The Analyst II - Privacy Officer will be directed by the Ancillary Patient Support Manager in the Hospital Administrator's Office at the Department of State Hospitals – Atascadero (ASH). The incumbent will be responsible for the following duties but not limited to:

• Receives, logs, investigates, analyzes, tracks, and responds to incoming patient requests for correction or amendment of protected health information and patient privacy and security complaints. Conducts corrections to addressograph errors and redaction errors. Maintains and safeguards HIPAA files and privacy practices.
• Implements existing state law and state policy regarding incident management and breach response. Promptly investigates incidents involving the improper dissemination of information, or the loss, damage, or misuse of information assets. Formulates and adopts an incident management plan. Applies lessons learned in the determination and implementation of appropriate corrective actions to prevent or mitigate the risk of similar occurrences.
• Interfaces with Patient Cost Recovery Services, Accounting, Standards Compliance, Trust Services, and hospital divisions to log and track disclosures of patient information in the accounting of disclosures as required by federal law.
• Updates the DSH-Atascadero management on HIPAA issues, problems, and recommends resolutions. Protected Health Information (PHI Team) Committee Chairperson.
• Contribute to the hospital's operational needs by gathering, tabulating and analyzing data.
• Collaborate with the Technology Services Department in the design, operation and maintenance of all HIMD databases.
• Update and maintain the Designated Record Set (DRS) and order of filing and thinning guidelines of the medical record.
• Ensures the Notice of Privacy Practices (NOPP) is posted in hospitals and that the version is current, ensures all patients receive copies of the NOPP.
• Ensures that patients have access to their health information, that denials are not inappropriate, that the legally required process for denials of access are followed, maintains documentation regarding denials.
• Assist HIM to ensure privacy of patient Protected Health Information (PHI) and Personally Identifiable Information (PII) is protected.
• Provides New Employee Orientation (NEO) regarding relevant legal, confidentiality, and HIPAA privacy and security responsibilities.
• Maintain New Patient Orientation (NPO) information regarding HIPAA privacy and security.
• Lead and process the Release of Information Desk in coordinating, analyzing, and determining the appropriate legal response to requests that call for the release of protected health information (PHI).
• See duty statement for additional duties.

Eligibility: To be considered for this career opportunity, applicants must have eligibility by way of one of the following: reachable on a certification list, have transfer eligibility, or have reinstatement eligibility. It is your responsibility to ensure that you meet the minimum qualifications specified in the examination bulletin/classification specifications. If you do not have eligibility, you must take the exam. The examination is a separate process from applying for this vacancy.

You will find additional information about the job in the Duty Statement.