What does a HIPAA Privacy Officer do?

A HIPAA Privacy Officer’s role in an organization is to make sure the private health information of patients and clients is protected in accordance with HIPAA. They are responsible for protecting patient privacy and confidentiality, which serves a dual purpose—upholding patient rights and helping to protect their employer from HIPAA violations. They serve as subject matter experts regarding HIPAA laws at both the federal and state level. Developing policies and procedures to protect sensitive information is a large part of a HIPAA Privacy Officer’s job duties, as well as implementing those procedures.

HIPAA Privacy Officer skills and qualifications

An individual applying to work as a HIPAA Privacy Officer must have a particular skill set to be successful in the role. Here are a few skills and qualifications to look for in a candidate.

• Attention to detail is a must-have. HIPAA Privacy Officers must pay close attention to the fine print when dealing with patient privacy and legal compliance issues.

• Rounded understanding of not only HIPAA laws at the federal and state levels but privacy laws in general. A formal law education isn’t necessarily a requirement, but the candidate must be able to demonstrate knowledge of privacy laws and their applications.

• Excellent communication skills are required for most jobs, but in HIPAA Privacy Officer careers, they’re essential. Not only will the Officer need to communicate well with legal counsel and company leadership, they’ll also need to put together clear and thorough training and procedures for employees.

• Assertiveness and ability to discipline others are good skills to have as well due to the fact that HIPAA Privacy Officers need to address privacy complaints, investigate possible HIPAA violations and issue corrective action when necessary.

HIPAA Privacy Officer experience requirements

When hiring a HIPAA Privacy Officer, try looking for a candidate with some professional experience working with HIPAA. If they don’t have professional experience with it, they should be able to demonstrate a deep and comprehensive understanding of HIPAA and how to prevent and solve privacy issues within an organization. Human resources experience can be beneficial as well, even if it’s not HIPAA-specific, as it gives a candidate an understanding of how HR departments work and their collaboration with legal compliance departments.

HIPAA Privacy Officer education and training requirements

A candidate applying for a HIPAA Privacy Officer position should have a degree in a relevant field, such as human resources, law, a healthcare-related field or another related degree. HIPAA Privacy Officers may also take a course to prepare for the Certified HIPAA Privacy Security Expert (CHPSE) exam, which trains them on security regulations and how to keep an organization in compliance with HIPAA.

The Society for Human Resource Management (SHRM) offers two certifications for HR professionals: the SHRM-CP (certified professional) and the SHRM-SCP (senior certified professional). These certifications aren’t HIPAA-specific, but they do demonstrate a thorough comprehension of human resources management, which can be extremely beneficial in HIPAA Privacy Officer careers.

HIPAA Privacy Officer salary expectations

According to Indeed Salaries, the average annual salary for a HIPAA Privacy Officer is $64,633. Salary expectations may change based on candidate experience and education, as well as cost of living and average salary in the area.

Job description samples for similar positions

If you’re looking for a position similar to a HIPAA Privacy Officer, try these job descriptions:

• Human Resources Manager

• Human Resources Director

• Human Resources Coordinator

HIPAA Privacy Officer job description FAQs

What is the difference between a Privacy Officer and a Compliance Officer?

Within an organization, a HIPAA Privacy Officer and HIPAA Compliance Officer are essentially the same thing. Their job is to ensure compliance with patient privacy laws and regulations, so they can go by either name.

Can a Privacy Officer and a Security Officer be the same person?

According to HIPAA, an organization must designate a Privacy Officer and a Security Officer. One person can serve in both roles. The Security Officer ensures that patients’ private health data is secure on an IT level, from security programs to procedures.

Who reports to a HIPAA Privacy Officer?

Essentially, your entire organization reports to the HIPAA Privacy Officer when it comes to keeping sensitive information safe. Everyone must follow HIPAA regulations and, therefore, the privacy procedures set out as part of the HIPAA Privacy Officer’s job duties and immediately report any breaches to the Privacy Officer.