Information Privacy Analyst Senior

Hennepin Healthcare is an integrated system of care that includes HCMC, a nationally recognized Level I Adult Trauma Center and Level I Pediatric Trauma Center and acute care hospital, as well as a clinic system with primary care clinics located in Minneapolis and across Hennepin County. The comprehensive healthcare system includes a 473-bed academic medical center, a large outpatient Clinic & Specialty Center, and a network of clinics in the North Loop, Whittier, and East Lake Street neighborhoods of Minneapolis, and in the suburban communities of Brooklyn Park, Golden Valley, Richfield, and St. Anthony Village. Hennepin Healthcare has a large psychiatric program, home care, and operates a research institute, philanthropic foundation, and Hennepin EMS. The system is operated by Hennepin Healthcare System, Inc., a subsidiary corporation of Hennepin County.  

Equal Employment Opportunities: We believe equity is essential for optimal health outcomes and are committed to achieve optimal health for all by actively eliminating barriers due to racism, poverty, gender identity, and other determinants of health. We are committed to equitable care and working in an environment that celebrates, promotes, and protects diversity, equity, inclusion, and belonging. We are committed to bringing in individuals with new cultural perspectives to assist in creating a more equitable healthcare organization.

SUMMARY:

We are currently seeking a Information Privacy Analyst Senior to join our team. This full time role will work days (hybrid). In-person presence is on as needed basis (seeking local candidate for this reason).

Purpose of this position: Under the direction of the Information Privacy Director, the Senior Information Privacy and Data Practices Analyst develops, maintains, and performs activities in support of effective privacy and data practices programs. Primary responsibilities include assisting with privacy program development and maintenance, supporting compliance with requests for data under the Minnesota Government Data Practices Act, conducting investigations, performing auditing and monitoring functions, and conducting education and outreach activities. Subject matter areas of expertise include, but are not limited to, HIPAA, state and federal privacy laws and regulations, and data practices laws.

RESPONSIBILITIES:

Minnesota Government Data Practices Act

• As a data practices designee, ensures timely responses to government data practices requests, including searching for, retrieving, reviewing, and redacting data, and providing timely responses to requester inquiries regarding the status of requests
• Assists in the administration of the data practices compliance program
• Provides guidance to leadership and Business Partners about timely response for requests for government data
• Writes and updates organizational policies and procedures for the data practices compliance program
• Remains current on developments in data practices laws, case law, and advisory opinions, and participates in continuing education and training opportunities related to the MGDPA

HIPAA Information Privacy Program

• Works closely with the Information Privacy Director to develop, implement, and maintain an effective information privacy program
• Provides consultation and guidance on projects regarding information privacy compliance
• Creates, coordinates, and updates the privacy training and awareness program, and conducts privacy presentations as needed
• Writes and updates organizational policies and procedures for the information privacy program
• Conducts regular and occasional privacy risk assessments and supports the development, and monitoring, of work plans to address identified risks
• Remains current on emerging privacy regulations and participates in continuing education and training opportunities related to applicable priv