Information Privacy Administrator

Ensures patient care, operational workflows, and business practices align with HIPAA Privacy and Security regulations, the Utah Government Data Privacy Act (GDPA), organizational policies and procedures, and other applicable laws. Serves as a subject matter expert, driving cross-functional privacy strategies, managing complex investigations, and integrating privacy principles across university units. Learn more about the great benefits of working for University of Utah: benefits.utah.edu The department may choose to hire at any of the below job levels and associated pay rates based on their business need and budget. Responsibilities Information Privacy Manager

1. Conducts investigations related to information privacy and security incidents. Clearly and accurately documents investigation, findings, analyses, and response activities.
2. Takes appropriate steps to respond to and report violations of applicable policy and privacy laws.
3. Conducts privacy compliance audits and prepares written and oral reports on these audits for leadership.
4. Coordinates the implementation of Business Associate Agreements and other relevant data access agreements.
5. Develops and presents training materials related to information privacy and security topics.
6. Promotes information privacy and security awareness through multiple platforms.
7. Supports patients, staff, faculty, and students by responding to questions, providing guidance, and facilitating issue resolution.
8. Responds to and facilitates data subject requests.
9. Participates on strategic project teams to develop and implement improvements related to information privacy.
10. Develops and maintains privacy policies, procedures, and guidelines based on best practices, compliance requirements, and operational needs.
11. Maintains current knowledge of privacy laws and trends. Analyzes the need for updates to policies, processes, or guidance due to emerging issues., 1. Conducts investigations related to information privacy and security incidents. Clearly and accurately documents investigation, findings, analyses, and response activities.
12. Takes appropriate steps to respond to and report violations of applicable policy and privacy laws.
13. Conducts privacy compliance audits and prepares written and oral reports on these audits for leadership.
14. Coordinates the implementation of Business Associate Agreements and other relevant data access agreements.
15. Develops and presents training materials related to information privacy and security topics.
16. Promotes information privacy and security awareness through multiple platforms.
17. Supports patients, staff, faculty, and students by responding to questions, providing guidance, and facilitating issue resolution.
18. Responds to and facilitates data subject requests.
19. Participates on strategic project teams to develop and implement improvements related to information privacy.
20. Develops and maintains privacy policies, procedures, and guidelines based on best practices, compliance requirements, and operational needs.
21. Maintains current knowledge of privacy laws and trends. Analyzes the need for updates to policies, processes, or guidance due to emerging issues., * Conducts audits and assessments of data handling processes. * Independently identifies and resolves complex privacy issues or gaps. * Develops and executes privacy initiatives and process improvements. * Provides leadership, direction, and support to staff and/or external customers. * Participates in and leads strategic projects with internal and external stakeholders to support compliance and improve processes.

• Conducts investigations into high-risk privacy incidents, breaches, and data subject complaints.

• Conducts Privacy Impact Assessments to identify privacy risks, recommend actions to mitigate risks, and incorporate Privacy by Design into new processes and products.

• Maintains proficient knowledge regarding federal and state privacy requirements, and their impact on organizational needs and workflows.

• Creates and administers enterprise-wide and role-based training and education to enhance privacy awareness.
• Serves as an expert resource in privacy issue analysis and resolution.
• Serves as a mentor to other privacy team members.

Requires a bachelor’s (or equivalency) + 8 years or a master’s (or equivalency) + 6 years of directly related work experience., EQUIVALENCY STATEMENT: 1 year of higher education can be substituted for 1 year of directly related work experience (Example: bachelor’s degree = 4 years of directly related work experience). Department may hire employee at one of the following job levels: Information Privacy Manager : Requires a bachelor’s (or equivalency) + 4 years or a master’s (or equivalency) + 2 years of directly related work experience. Information Privacy Administrator : Requires a bachelor’s (or equivalency) + 6 years or a master’s (or equivalency) + 4 years of directly related work experience. Information Privacy Administrator, Sr. : Requires a bachelor’s (or equivalency) + 8 years or a master’s (or equivalency) + 6 years of directly related work experience. Preferences Information Privacy Manager/Administrator

• Experience in health care operations
• Experience in information privacy, cyber security, information technology, or regulatory compliance

• Related certifications (e.g., ISACA, CHPC, CIPP, CIPT), * Master’s degree in healthcare, legal, or IT related fields is preferred. Experience in healthcare, information security, information technology, data governance, or artificial intelligence. CIPP, CISSP, CIMP, or other privacy/security certifications are desired., The University of Utah values candidates who have experience working in settings with students and possess a strong commitment to improving access to higher education., + High School Diploma or Equivalent

• Associate Degree
• Bachelor’s Degree
• Master’s Degree
• Doctorate Degree 2. * How many years of related work experience do you have?
• Less than 2 years
• 2 years or more, but less than 4 years
• 4 years or more, but less than 6 years
• 6 years or more, but less than 8 years
• 8 years or more, but less than 10 years
• 10 years or more, but less than 12 years
• 12 years or more, but less than 14 years
• 14 years or more