Ensuring that medical facilities meet all applicable regulatory and legal requirements. An information governance program shall be constructed to comply with applicable laws, regulations, standards, and organizational policies.

Ensure company has and maintains appropriate privacy and confidentiality documentation and filings and each patient protected health record will be filed, stored, restricted from public access, utilizing standardized and centralized medical group network tracking system.

Ensure contracts with third parties (including data processors) include relevant privacy and information security requirements.

Identify and evaluate the company’s current privacy policy and evaluates the privacy policy in light of state and federal regulations and HIPAA guidelines.

Participate in the development, implementation, and ongoing compliance monitoring of all business associates and business associate agreements, to ensure all privacy concerns, requirements, and responsibilities are addressed.

Take a lead role, to ensure the organization maintains appropriate privacy and confidentiality consents, authorization forms and information notices and materials reflecting current organization and legal practices and requirements.

Developing, implementing, and maintaining corporate privacy policies, procedures, and infrastructure in coordination with key stakeholders. Stakeholders are the people and organizations whose attitudes and actions have an impact on the success of your project or your company.

Develop, implement, and maintain policies and procedures to protect personal data and establish appropriate data protection practices when collecting, processing, storing, disclosing, and destroying personal data.

A privacy policy is a general statement about how personal information flows through an organization.

Having effective and robust security and privacy programs is key to avoiding reputation, regulatory, and financial risk.