- Location
- Franklin, TN, US
- Workplace
- Remote, Hybrid, Onsite
- Type
- Full-time
- Department
- Legal
- Closing date
- Today
- Source
- iCIMS
Description
Overview
About This Role
Hybrid: 3 day in office 2 day remote.
The Privacy Specialist supports the organization's enterprise privacy program by ensuring compliance with HIPAA, CFR Part 2, other federal and state privacy laws, and internal privacy requirements. This position is responsible for conducting privacy risk assessments, investigating privacy incidents and complaints, supporting regulatory compliance activities, managing privacy related requests, delivering workforce education, and collaborating with business partners to integrate privacy by design principles into organizational processes.
The Privacy Specialist supports the organization's enterprise privacy program by ensuring compliance with HIPAA, CFR Part 2, other federal and state privacy laws, and internal privacy requirements. This position is responsible for conducting privacy risk assessments, investigating privacy incidents and complaints, supporting regulatory compliance activities, managing privacy related requests, delivering workforce education, and collaborating with business partners to integrate privacy by design principles into organizational processes.
Our Mission
At Acadia, we exist to Lead Care with Light. Every day, our teams help improve lives, inspire hope, and elevate communities through compassionate behavioral healthcare.
Compensation & Benefits
We value your expertise and dedication—and we invest in your success.
- Competitive Base Salary commensurate with experience
- Comprehensive Medical, Dental, and Vision Insurance
- 401(k) Plan with Company Match
- Paid Time Off (PTO) and recognized holidays
- Company-paid Basic Life and AD&D Insurance
- Employee Assistance Program (EAP) and mental wellness resources
- Opportunities for professional growth and advancement within Acadia’s nationwide network
Responsibilities
What you’ll do…
Investigate privacy complaints, incidents, reports, and potential security events.
- Determine whether a HIPAA violation or reportable breach has occurred and support notification activities as necessary.
- Maintain audit ready documentation and investigation records.
- Support the development, implementation, and maintenance of the organization's privacy program.
- Review and update privacy policies, standards, procedures, workflows, Data Use Agreements, access requests, and other business practices to identify privacy risks, and support appropriate use, disclosure, access, and safeguarding of protected health information.
- Monitor regulatory developments and emerging privacy requirements.
- Assist in privacy audits, monitoring activities, and corrective action plans.
- Analyze privacy trends and recommend risk mitigation strategies.
- Collaborate with Legal, Compliance, Information Security, IT, HIM, Clinical, and Operations teams to embed privacy by design principles.
- Participate in vendor and third party privacy reviews.
- Support data mapping, records management, data retention, and information governance initiatives.
- Support patient and individual privacy request processes including access, amendments, restrictions, and related inquiries.
- Develop and deliver privacy education and awareness training programs.
- Assist in the facility site visit process
- Assist in Acadia Healthcare Identity Governance
- Other duties as assigned
Qualifications
What you'll bring...
Minimum
- Bachelor’s degree in a related field or equivalent combination of education and experience.
- Knowledge of HIPAA, HITECH, and healthcare privacy requirements.
- Strong analytical, investigative, organizational, and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to manage sensitive and confidential information with discretion.
Preferred Qualifications
- CHPS, CHC, CHPC, CIPP, or similar certification preferred.
- 1-2 years of healthcare privacy, compliance, auditing, investigations, or related experience preferred.
- Experience supporting enterprise privacy programs and risk assessments.
- Experience in multi-site healthcare environments.
- Knowledge of privacy by design and data governance principles.
Why Acadia?
When you join Acadia Healthcare, you become part of a team dedicated to improving lives through compassionate care and ethical leadership. We are committed to helping our employees grow professionally while making a meaningful difference for patients, families, and communities.
At Acadia, we:
- Lead Care with Light by supporting those who care for others.
- Set the standard for care through accountability and excellence.
- Lift and uplift one another through collaboration and respect.
- Innovate quickly to save lives by improving processes and outcomes.
- Succeed as one by working together toward a common purpose.
If you're passionate about investigations, healthcare compliance, and protecting patients while strengthening organizational integrity, we encourage you to apply.
Acadia Healthcare is proud to be an Equal Opportunity Employer. We are committed to creating an inclusive workplace where everyone can thrive. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, genetic information, or any other status protected by applicable law.
AHCORP
LI-TB1
We are committed to providing equal employment opportunities to all applicants for employment regardless of an individual’s characteristics protected by applicable state, federal and local laws.