Privacy Analyst

Inspired by faith. Driven by innovation. Powered by humankindness. CommonSpirit Health is building a healthier future for all through its integrated health services. As one of the nation’s largest nonprofit Catholic healthcare organizations, CommonSpirit Health delivers more than 20 million patient encounters annually through more than 2,300 clinics, care sites and 137 hospital-based locations, in addition to its home-based services and virtual care offerings. CommonSpirit has more than 157,000 employees, 45,000 nurses and 25,000 physicians and advanced practice providers across 24 states and contributes more than $4.2 billion annually in charity care, community benefits and unreimbursed government programs. Together with our patients, physicians, partners, and communities, we are creating a more just, equitable, and innovative healthcare delivery system.

As our Privacy Analyst, you will be instrumental in upholding our commitment to data privacy and fostering trust, ensuring meticulous adherence to all relevant privacy laws, regulations, and organizational policies. You will play a critical role in safeguarding sensitive information and mitigating privacy risks.

Every day you will conduct privacy risk assessments, investigate potential privacy incidents, and ensure compliance with regulations such as HIPAA, GDPR, or other industry-specific standards. You will be expected to develop and deliver privacy training, assist with policy development, manage data subject requests, and collaborate with various departments to embed privacy-by-design principles into our systems and processes.

To be successful in this role, you must possess an in-depth understanding of data privacy laws and best practices, strong analytical and problem-solving skills, meticulous attention to detail, and excellent communication abilities to clearly articulate complex privacy requirements.

As our Privacy Analyst, you will serve as a vital protector of patient data, ensuring our organization remains in full compliance with HIPAA regulations and internal privacy standards. You will act as the primary point of contact for privacy-related inquiries, playing a key role in maintaining institutional integrity by managing, documenting, and resolving privacy incidents across multiple divisions.

Every day you will lead thorough investigations into privacy complaints, reports, and potential security events. You will engage directly with patients, families, and internal stakeholders to gather facts, conduct comprehensive root-cause analyses, and determine if a privacy violation or formal data breach has occurred. Your meticulous documentation will be essential for maintaining audit-ready records and ensuring our privacy program exceeds regulatory expectations.

To be successful in this role, you will possess a sharp analytical mindset and a deep understanding of healthcare privacy laws. You must be an effective communicator who can handle sensitive situations with empathy and professionalism. We are looking for a proactive problem-solver who can balance cross-divisional responsibilities while upholding the highest standards of confidentiality and data security.

• Investigate and document privacy incidents, including complaints, reports, and events.
• Provide cross-coverage for privacy investigations across various organizational divisions.
• Interact professionally with patients, families, and complainants regarding privacy concerns.
• Conduct thorough investigations to determine if a HIPAA privacy violation or breach has occurred.
• Maintain comprehensive documentation to ensure compliance with federal and state privacy mandates.
• Bachelor’s degree required (or equivalent combination of relevant experience and education).
• Required: Minimum of three (3) years of direct experience in healthcare privacy or compliance investigations.

Required:

• Bachelors Other or experience and/or education may be considered in lieu of degree.
• Three (3) years’ experience in health care privacy or compliance investigations.