HEALTH INFORMATION MANAGEMENT PRIVACY AND SECURITY OFFICER

AHIMA Foundation

Documents

Individual state requirements may vary. Please contact your local apprenticeship office to ensure this version is suitable to your state’s requirements.

Work Process Schedule

Work Process Content

On the Job Training

Anonymous

Skills

Maintains current knowledge of applicable federal and state privacy laws and accreditation standards.

Demonstrates understanding of HIPAA laws, standards and state privacy laws.

Provides guidance and assistance in the identification, development, implementation, and maintenance of organization information privacy policies and procedures in coordination with organization management.

Coordinates the development of privacy risk assessment policies and procedures

Performs initial and periodic information privacy risk assessments and conducts related ongoing compliance monitoring activities.

Conducts audits of internal and external privacy functions

Participates in the development, implementation, and ongoing compliance monitoring of all trading partner and business associate agreements.

Participates in the development, implementation, and ongoing compliance monitoring of all trading partner and business associate agreements.

Establishes a preventative program to detect, prevent and mitigates privacy/security breaches.

Develops performance measures and reports to monitor and improve organizational performance and report to appropriate organizational body.

Establishes an incident/complaint/breach investigation response, develops response plan and oversees investigations of incidents/complaints/breaches. Determines corrective action/remediation, sanctions and disciplinary actions.

Coordinates with the Corporate Compliance Officer or legal re: procedures for documenting and reporting any evidence of privacy violation

Oversees, directs, delivers, or ensures delivery of initial and privacy training and orientation to all employees, volunteers, medical and professional staff, contractors, alliances, business associates, and other appropriate third parties.

Develop and implement a corporate- wide Privacy Training Program in conjunction with the Security Officer Oversight, Cyber Security Awareness & Training Program

Establishes a mechanism to track access to Protected Health Information (PHI), within the purview of the organization and as required by law.

Monitors Access and Disclosure Verification Procedures

Oversees processes to inspect, amend, and restrict access to protected health information when appropriate.

Provides support for organizational processes for use and disclosure of PHI including

Ensures compliance with privacy practices and consistent application of sanctions for failure to comply with privacy policies for all individuals in the organization’s workforce, extended workforce, and for all business associates.

Establishes and/or monitors an internal privacy audit program

Reviews security plans throughout the organization’s network to ensure alignment between security and privacy practices, and acts as a liaison to the information systems department.

Establish and monitor internal privacy and security audit programs amendments, corrections, and accounting for disclosures

Works with all organization personnel involved with any aspect of release of protected health information, to ensure full coordination and cooperation under the organization’s minimum necessary protocols, policies and procedures and legal requirements.

Periodically revise the privacy program in light of changes in laws, regulatory or company policy

Participates in the development and maintenance of the inventory of software, hardware and all information assets to protect information assets and to facilitate risk analysis.

Provides input to mitigate information security risk

Monitors advancements in information privacy technologies to ensure organizational adaptation.

Demonstrates current knowledge of information privacy technologies

Works with organization administration, legal counsel, and other related parties to represent the organization’s information privacy interests with external parties (state or local government bodies). Cooperates with the Office of Civil Rights, other legal entities, and organization officers in any compliance reviews or investigations.

Develops appropriate sanctions for failure to comply with the corporate privacy policies and procedures

Related Instruction Outline

HEALTH INFORMATION MANAGEMENT PRIVACY AND SECURITY OFFICER

Work Process Content

Related Instruction Content

Similar Programs