Corporate Counsel and Privacy Officer - Tampa, FL - Greenway Health

You Belong at Greenway

Bring your best and truest self. We celebrate what makes us different and what brings us all together. At Greenway Health, we are committed to an inclusive environment and a culture of belonging as we pursue our purpose of healthier communities, successful providers, and empowered patients. We are united in our goal to build the future of healthcare technology. Join us.

Greenway is seeking a corporate counsel to serve as the company’s Privacy Officer and to assist with privacy, security, data usage and health care regulatory matters. The successful candidate will have considerable experience in health care and with privacy matters under HIPAA and state laws. S/he will ensure full coordination and documentation across all departments involved in any way with HIPAA privacy and related security laws. S/he will also be responsible for regulatory research and analysis of applicable privacy laws and regulations and ensuring compliance therewith.

The ideal candidate will also have experience in healthcare technology, healthcare laws generally, including the Anti-Kickback Statute, False Claims Act and the 21^st Century Cures Act.

The position is based in Tampa, FL.

Essential Duties & Responsibilities

The candidate will be responsible for:
Privacy

• Being the company expert on HIPAA privacy laws, rules and regulations and administering the Company’s overall HIPAA privacy program with respect to employees, clients and vendors
• Preparing and implementing effective HIPAA and privacy training and policies and procedures throughout the entire organization to ensure that any changes in regulations are communicated in a timely manner and understood by all
• Assist management in coordinating internal compliance reviews and monitoring activities and third party audits, including annual or periodic reviews of departments and periodic vendor and client audits
• Implement and maintain an effective incident response program, including, but not limited to managing outside counsel, insurance claims, forensics experts and others as necessary
• Work closely with the Chief Information Security Officer to evaluate appropriate technology solutions to safeguard, map and maintain PHI and PII
• Review software functionality to evaluate and analyze privacy and security implications;
• Be the subject matter expert on business associate agreements, data usage agreements and other forms of agreements where privacy, security and data usage is implicated
• Advise on and implement programs regarding data rights and usage, data de-identification and data monetization
• Oversee the legal aspects of the company’s generative AI procedures

Regulatory Advice

• Advise on new regulations impacting electronic health records developers, including the 21^st Century Cures Act and other ONC, CMS and state regulations
• Advise on regulations applicable to clearinghouses and revenue cycle management operations
• Act as primary attorney responsible for ensuring compliance with the Anti-Kickback Statute and the False Claims Act