• Lead end-to-end investigation of reported HIPAA incidents, determining scope, impact, and required remediation steps • Follow, refine, and maintain standardized investigation protocols to ensure consistent, thorough incident response • Track incidents from identification through resolution, maintaining comprehensive documentation • Analyze patterns across incidents to identify systemic issues and opportunities for process improvement • Conduct root cause analysis for privacy incidents and implement corrective action plans • Develop, document, and maintain privacy-related standard operating procedures and policies as needed • Identify and recommend technology and process improvements to prevent recurring incidents • Establish metrics to measure the effectiveness of privacy controls and remediation efforts • Draft clear incident notifications to affected healthcare organizations, and prepare correspondence for impacted individuals and regulatory bodies as needed • Prepare comprehensive incident summaries and root cause analyses • Document privacy decisions and rationales to support compliance requirements • Collaborate to develop privacy educational materials to improve privacy awareness and compliance enterprise-wide • Partner with operations, customer service, legal, and security/IT teams to address privacy concerns • Provide timely, accurate guidance on information release in accordance with regulations • Stay current on evolving privacy requirements and industry best practices • Recommend targeted mitigation and corrective action based on identified gaps • Participate in privacy-focused professional development opportunities • Contribute to the development of privacy training materials and awareness campaigns