What are the responsibilities and job description for the Medical Records Privacy Officer (Medical Records Administrator) position at City of Norfolk, VA?
Description
Norfolk, Virginia is America's most authentic and urban waterfront city. Home to the world's largest naval station and the business, arts, and cultural center of Coastal Virginia, Norfolk has been rated a top place to live, work, play, and raise a family by numerous publications. Working for the City of Norfolk is an opportunity to make a real difference in the lives of others. With our commitment to competitive pay and a strong retirement package, you can do good for your community and do well for yourself. Join a caring workplace that proudly celebrates uniqueness, authenticity, and a shared commitment to improving the lives of our residents.
The Norfolk Community Services Board (NCSB)is the primary provider of public mental health, substance abuse, and intellectual disability services for the City of Norfolk. A continuum of services spans from outreach and prevention through intensive psychiatric care, provided by highly clinically oriented service professionals with expertise in these service areas.
Today, the NCSB provides treatment and rehabilitation services to over 6,000 Norfolk citizens yearly. Norfolk CSB seeks team members interested in providing skilled services in a public service environment and dedicated to supporting a positive work and treatment environment. Please join us as we provide hope and recovery opportunities for the persons we serve.
The NCSB is seeking a Medical Records Privacy Officer (Medical Records Administrator) in their Compliance division. The Medical Records Privacy Officer is responsible for managing and safeguarding the confidentiality of consumer medical records within the NCSB. This role focuses on developing, implementing, and overseeing policies and procedures to ensure compliance with federal, state, and local privacy regulations (e.g., HIPAA, HITECH, 42 CFR Part 2 Final Rule). The incumbent plans, organizes, and directs privacy-related activities, coordinates the secure flow of medical records information, and leads ongoing quality improvement efforts to protect sensitive health data. The position operates under general supervision and requires a high level of expertise in medical records privacy.
Department Hiring Salary Range: $46,589 - $53,577
Essential Functions
Essential functions include but are not limited to:
Policy Development and Compliance- Develops and implements policies and procedures to ensure the confidentiality, security, and integrity of medical records, aligning with HIPAA, HITECH, 42 CFR Part 2 Final Rule, and other regulatory standards.
- Evaluates and revises agency privacy protocols and forms to meet licensure, third-party payer, and agency requirements.
- Provides technical advice to staff on privacy issues, including data handling, breach prevention, and patient rights.
-
Staff Oversight and Training
- Plans, organizes, and directs the work of medical records staff related to privacy practices, including interviewing, recommending hires, and reviewing performance to ensure adherence to confidentiality standards.
- Develops and delivers training programs to educate staff on privacy policies, secure data entry, and compliance with legal requirements.
-
Budget and Vendor Management
- Reviews, manages, and maintains the departmental budget for privacy-related activities, ensuring resources are allocated to meet revenue and expense goals (e.g., privacy software, training, audits).
- Manage budgeting, billing, storage, retrieval, and destruction activities with our primary medical record storage vendor.
-
Records Security and Retention
- Reviews and recommends strategies for active and closed file storage, ensuring compliance with legal retention and disposition schedules.
- Monitors adherence to privacy protocols for the defined record-set, scanning of record attachments, and off-site storage, acting as a liaison with document storage contractors to maintain secure inventory and tracking.
-
Privacy Monitoring and Reporting
- Monitors medical records documentation for privacy compliance through regular reviews, data collection, and analysis, preparing statistical reports on findings (e.g., unauthorized access incidents, duplicate records).
- Responds to subpoenas, court orders, and patient requests for the release of medical records, ensuring all disclosures comply with privacy laws.
- Runs and distributes quality assurance reports related to privacy exceptions (e.g., breaches, incomplete consent forms) and implements corrective actions.
-
Coordination with Healthcare Informatics Staff
- Collaborates with Healthcare Informatics Staff to develop secure scanning and cataloging of record attachments into the EHR while maintaining optimal data quality and integrity and mitigating risks of privacy violations.
-
Related Duties
- Stays abreast of industry changes and innovations in medical records privacy, participating in planning to adapt agency practices accordingly.
- Performs additional tasks as assigned, such as assisting with audits or investigations related to privacy breaches.
Education/Experience
Graduation from High School and at least two years of college level course work in records management or a related field or equivalent training.
Two years of experience in a records management position, or equivalent experience.
Preferred Education/Experience:
- Minimum Education: Graduation from high school supplemented by at least two years of college-level coursework in records management, health information management, or a related field (or equivalent training).
- Minimum Experience: Two (2) years of experience in a records management position, with a focus on medical records privacy or compliance, or an equivalent combination of education and experience.
- Preferred Experience: Experience with HIPAA compliance and electronic health record systems is highly desirable.
Additional Information & Requirements
- Requires certification and ongoing maintenance of certification as a Registered Health Information Technician (RHIT) in accordance with AHIMA requirements or equivalent.
- Certification in Healthcare Privacy (e.g., Certified in Healthcare Privacy Compliance - CHPC) is preferred.
- Signing Bonus: This position is eligible for a one-time $5,000 signing bonus for new hires.
Salary : $46,589 - $53,577
