Senior Manager, HIPAA Privacy

Datavant is a data platform company and the world’s leader in health data exchange. Our vision is that every healthcare decision is powered by the right data, at the right time, in the right format.

Our platform is powered by the largest, most diverse health data network in the U.S., enabling data to be secure, accessible and usable to inform better health decisions. Datavant is trusted by the world’s leading life sciences companies, government agencies, and those who deliver and pay for care. 

By joining Datavant today, you’re stepping onto a high-performing, values-driven team. Together, we’re rising to the challenge of tackling some of healthcare’s most complex problems with technology-forward solutions. Datavanters bring a diversity of professional, educational and life experiences to realize our bold vision for healthcare.

Role Summary:

The Senior Manager, HIPAA Privacy will serve as a trusted subject matter expert in HIPAA and state laws within the Provider Privacy team in Datavant’s Legal department. Reporting to the Vice President, Provider Privacy, this role will support compliance with HIPAA and state privacy laws, provide strategic advice, and drive privacy risk mitigation across Datavant’s Provider division business, product, and operations functions. The Senior Manager will also own the integration of privacy considerations into training, quality, and product development in the Provider division. For candidates with legal credentials, this role will also include responsibilities such as responding to regulatory inquiries and serving as HIPAA privacy counsel to issue legal advice and opinions.

Key Responsibilities:

• Incident & Risk Management: Lead a team of privacy analysts to ensure timely and thorough investigation, documentation, and escalation of potential Unauthorized Disclosures (UADs). Provide guidance on evaluating potential incidents, assist in risk assessments and in developing mitigation strategies. Ensure consistency and high quality in incident reporting and remediation plans, and support compliance with incident notification deadlines.
• Governance & Policy: Develop, maintain, and present key privacy performance indicators and metrics to senior leadership, highlighting trends, risk exposure, opportunities. Contribute to the drafting, updating, and communication of internal privacy policies, training, and presentations regarding privacy and compliance topics.
• HIPAA Training Support: Provide HIPAA expertise to aid in the creation and development of training materials for the Datavant Health Information Specialist Certification Program, ensuring that course content reflects current regulatory requirements and best practices.
• State Law Compliance: Support the evaluation and documentation of state-specific health information privacy and release of information laws.
• Stakeholder Engagement: Act as a privacy resource for internal teams and Provider division customers, providing clear, business-oriented guidance on complex privacy issues.
• Quality Partnership: Collaborate with the Provider division Quality team to drive forward quality roadmap initiatives, embedding privacy-by-design principles and ensuring that quality activities support privacy and regulatory compliance.
• Provider Product Advisory Support: Partner with the Provider Product team to advise on product roadmap enhancements and new features, ensuring that all development aligns with applicable federal and state law, as well as customer contractual requirements. Support Privacy Impact Assessments for new projects or product features, evaluate risks, and recommend mitigation strategies.

Basic Qualifications:

• A bachelor's degree and at least ten years of experience implementing regulations governing health information privacy
• Extensive experience interpreting and navigating health information privacy and related regulatory regimes, including HIPAA and state laws related to the release of health information
• Working familiarity with other aspects of the healthcare regulatory environment, such as the information blocking regulations
• Strong communication, interpersonal and project management skills
• Impeccable judgment, including understanding how to properly evaluate and communicate risks
• Excellent communication and organizational skills
• A great teammate who is willing to join supportive and collaborative colleagues
• Proactive attitude and approach towards continuous improvement
• Commitment to the highest standards of quality, integrity, ethics and professionalism

Desired Qualifications:

• J.D. from an accredited university with admission to practice law in at least one state (this role may also be titled Privacy Counsel for qualified applicants)
• Certification in privacy or healthcare privacy (e.g., CHPC or CIPP/US)
• Energized by working in a high throughput, collaborative environment where you are continually multi-tasking and re-prioritizing your work to respond quickly and meet deadlines
• Ability to work independently with minimal supervision
• Demonstrated intellectual curiosity to explore new concepts and accept new challenges

We are committed to building a diverse team of Datavanters who are all responsible for stewarding a high-performance culture in which all Datavanters belong and thrive. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.

At Datavant our total rewards strategy powers a high-growth, high-performance, health technology company that rewards our employees for transforming health care through creating industry-defining data logistics products and services.

The range posted is for a given job title, which can include multiple levels. Individual rates for the same job title may differ based on their level, responsibilities, skills, and experience for a specific job.

The estimated total cash compensation range for this role is:$157,000—$180,000 USD

To ensure the safety of patients and staff, many of our clients require post-offer health screenings and proof and/or completion of various vaccinations such as the flu shot, Tdap, COVID-19, etc. Any requests to be exempted from these requirements will be reviewed by Datavant Human Resources and determined on a case-by-case basis. Depending on the state in which you will be working, exemptions may be available on the basis of disability, medical contraindications to the vaccine or any of its components, pregnancy or pregnancy-related medical conditions, and/or religion.

This job is not eligible for employment sponsorship.

Datavant is committed to a work environment free from job discrimination. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. To learn more about our commitment, please review our EEO Commitment Statement here. Know Your Rights, explore the resources available through the EEOC for more information regarding your legal rights and protections. In addition, Datavant does not and will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay. 

At the end of this application, you will find a set of voluntary demographic questions. If you choose to respond, your answers will be anonymous and will help us identify areas for improvement in our recruitment process. (We can only see aggregate responses, not individual ones. In fact, we aren’t even able to see whether you’ve responded.) Responding is entirely optional and will not affect your application or hiring process in any way.

Datavant is committed to working with and providing reasonable accommodations to individuals with physical and mental disabilities. If you need an accommodation while seeking employment, please request it here, by selecting the ‘Interview Accommodation Request’ category. You will need your requisition ID when submitting your request, you can find instructions for locating it here. Requests for reasonable accommodations will be reviewed on a case-by-case basis.

For more information about how we collect and use your data, please review our Privacy Policy.