Description:
Position Summary
Analyzes PHI handling and disclosure practices for County Fire and the 16 HCC Departments against HIPAA Privacy Rule requirements, identifying and documenting compliance gaps.
Key Responsibilities
• Inventory PHI generation, retention, and destruction practices per department.
• Evaluate policies/procedures against HIPAA Privacy practice areas (minimum necessary, authorizations, Notice of Privacy Practices, patient access/amendment rights, breach procedures, etc.).
• Conduct physical evaluations of PHI storage/handling locations (printers, fax machines, mail).
• Review and evaluate HIPAA security awareness training materials and records.
Requirements:
Required Qualifications
• 4+ years of HIPAA Privacy Rule compliance / healthcare compliance experience.
• Strong working knowledge of 45 CFR Part 164 Subpart E.
• Experience conducting compliance interviews with clinical and administrative staff.
Preferred Qualifications
• CHPC (Certified in Healthcare Privacy Compliance) certification.
• Prior experience with county or multi-facility public health systems.
Travel
Onsite for facility inspections and staff interviews at Arrowhead Regional Medical Center (Colton), and clinic/administrative locations in San Bernardino, Rialto, Redlands, and Fontana; remote for documentation review and report writing.