The Compliance & Privacy Partner reports to the Chief Compliance Officer of Emory Healthcare (CCO EHC) and is responsible for supporting the daily operations of the Emory Healthcare Office of Compliance Programs. This role serves as a subject matter expert on regulatory compliance and privacy, supporting the implementation of compliance initiatives, conducting investigations, coordinating risk assessments, and providing guidance to departments and operating units. The Partner ensures adherence to healthcare laws, regulations, and policies and plays an important role in education, policy development, and the administration of key programs including the Emory Trust Line and Conflict of Interest disclosures.
Principal Duties and Responsibilities
- Supports the development and execution of department goals and the annual work plan
- Participates in compliance operations initiatives and monitoring systems
- Supports compliance education in collaboration with the Directors of Compliance and Compliance Operations, Compliance and Privacy Operations, Compliance and Audit Analysis, and Compliance Audit and Analysis.
- Provides operational support for the Emory Healthcare Compliance Program
- Serves as a resource to operating units, departments, and staff on compliance matters
- Analyzes and addresses compliance concerns based on regulatory research and periodic reviews
- Conducts investigations into patient privacy matters and breach incidents
- Coordinates breach risk analyses and disclosure data reporting to DHHS per the Privacy Rule
- Collaborates with internal and external legal counsel on compliance investigations and OCR requests
- Assist in reviewing and updating privacy and compliance policies
- Supports regulatory and internal audit requests and documentation
- Assists with compliance review of Business Associate Agreements and document revisions
- Conducts audits and investigations, summarizes findings, and supports corrective action plans
- Collaborate with Internal Audit and Enterprise Risk Management for annual enterprise risk assessments
- Supports departments in implementing compliance-related policies and education
- Coordinates responses to HIPAA/privacy allegations with Risk Management and Patient Relations
- Assists the CCO EHC on cross-functional compliance and privacy initiatives
- Supports investigations of compliance violations, documents findings, and coordinates resolution
- Maintains awareness of applicable laws, regulatory changes, and ethical business practices
- Provides real-time compliance support to business units across Emory Healthcare
- Assists with documentation and submission processes for government and regulatory requests
- Contributes to the preparation of materials and reports for the Management Compliance Committee (MCC) and Audit & Compliance Committee (ACC)
- Supports Conflict of Interest (COI) and Conflict of Commitment (COC) disclosure processes and investigations
- Assists in managing the Emory Trust Line (Hotline), ensuring reported concerns are addressed in accordance with policies
- Promote awareness of the Emory Trust Line and support related employee outreach campaigns
- Coordinates with Emory University Compliance and Human Resources as needed
- Collaborate with Risk Management to review SAFE reports that may involve privacy or compliance violations
Minimum Qualifications
- Bachelor's degree in healthcare or a business-related field. Master's degree preferred
- At least seven (7) years of experience in healthcare compliance, preferably in an Academic Medical Center
- Certification in healthcare compliance or a comparable credential from a recognized industry association focused on regulatory compliance, auditing, or monitoring
Knowledge, Skills, and Abilities
- Strong understanding of healthcare compliance and privacy laws, including HIPAA and the False Claims Act
- Proven experience in audits, investigations, and development of corrective action plans
- Excellent written and verbal communication skills
- Strong analytical and problem-solving capabilities
- Proficient in Microsoft Office and other relevant healthcare systems
- Ability to manage multiple projects and meet critical deadlines