ABOUT THE ROLE

The Privacy Director will lead Bright Health’s Privacy Program including but not limited to daily operations of the program, development, implementation, and maintenance of policies and procedures, monitoring program compliance, investigation and tracking of incidents and breaches and ensure that member and patients' rights remain in compliance with federal and state laws.

This role is located remotely or in Minneapolis, MN.

YOUR RESPONSIBILITIES

• Leads a strategic and comprehensive privacy program that defines, develops, maintains and implements policies and processes and training that enable consistent, effective privacy practices which minimize risk and ensure the confidentiality of protected health information (PHI), paper and/or electronic, across all media types
• Establishes, with the information security officer, an ongoing process to track, investigate and report inappropriate access and disclosure of protected health information
• Performs and oversees initial and periodic information privacy risk assessments, analyses, and appropriate mitigation and remediation
• Accountable for ensuring the organization maintains all appropriate privacy forms and disclosure statements, including confidentiality consents, authorization forms, notices of current privacy practices, consumer-facing form disclaimer language, etc.
• Leads the development, implementation, and ongoing compliance monitoring of all business associates and business associate agreements, to ensure all privacy concerns, requirements, and responsibilities are addressed
• Works cooperatively across all organization units in overseeing patient rights, including activities to inspect, amend, and restrict access to protected health information when appropriate
• Manages all required breach determination and notification processes under HIPAA and applicable State breach rules and requirements
• Establishes and administers a process for investigating and acting on privacy and security complaints
• Performs required breach risk assessment, documentation, and mitigation
• Works with Human Resources Team to ensure consistent application of sanctions for privacy violations
• Maintains current knowledge of applicable federal and state privacy laws, accreditation standards, and evolving privacy-related enforcement actions and case law

EDUCATION, TRAINING, AND PROFESSIONAL EXPERIENCE

• Bachelor’s degree required; JD preferred
• Eight (8)+ years’ experience with privacy/compliance experience

PROFESSIONAL COMPETENCIES

• Subject matter expertise in state and federal information privacy and security laws, including but not limited to HIPAA
• Strong attention to detail and demonstrated ability to manage numerous projects with varying degrees of scope
• Exceptional written and oral communication and presentation skills
• Demonstrated skills in collaboration, teamwork, and problem-solving to achieve goals
• Demonstrated skills in verbal communication and listening
• Excellent writing skills
• A high level of integrity and trust

LICENSURES AND CERTIFICATIONS

• Certified Information Privacy Professional (CIPP) or similar certification (preferred)

ABOUT US

At Bright Health, we brought together the brightest minds from the health care industry and consumer technology and together we created Bright Health: a new, brighter approach to healthcare, built for individuals. Our plans are easy to manage, personalized and more affordable, giving people the quality care they deserve. Through our exclusive care partnerships with leading health systems in local communities we are reshaping how people and physicians achieve better health together.

We’re Making Healthcare Right. Together. 

We've won some fun awards like: Great Places to Work, Modern Healthcare, Forbes, etc. But more than anything, we're a group of people who are really dedicated to our mission in healthcare. Come join our growing team!

As an Equal Opportunity Employer, we welcome and employ a diverse employee group committed to meeting the needs of Bright Health, our consumers, and the communities we serve. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.

BRIGHT ON!