Privacy Officer

2026-11-03

Statement of Work • Availability o The Privacy Officer will be available up to 30 hours per week ( in - person or virtual ). o The Privacy Officer will be available for same - day triage of suspected privacy incidents . o Additional hours and capacity may be authorized by the County during periods of high demand , such as responding to significant privacy incidents . • Responsibilities o Compliance  Identify and ensure compliance with HIPAA , 42 CFR Part 2 , and other applicable federal and State privacy law .  Review and update the Clackamas County hybrid entity determination and associated chart consistent with applicable rules and best practices . o Incident Response  Serve as the primary point of contact for same - day triage of suspected HIPAA and other privacy incidents that arise during the term of the contract .  In coordination with the Security Officer , Privacy Managers , and other County stakeholders , facilitate the response , investigation , and mitigation of HIPAA and other privacy incidents . o Consultation and Support  Provide ad hoc consultation to Department and Division Directors , Privacy Managers , and other County stakeholders , and respond to privacy related questions .  Facilitate privacy meetings , including existing privacy workgroups , and provide recommendations to strengthen countywide privacy governance .  Provide direction / guidance to County Administration in the development of a permanent Privacy Officer job description and duties . o Policies and Training  In coordination with other County stakeholders , review and update Clackamas County HIPAA Privacy and Security Rules , Notice of Privacy Practices , and other privacy related policies and procedures .  Review and revise current Clackamas County HIPAA and privacy training materials , and recommend updates to training content , frequency , and tracking practices .  Review and update HIPAA breach and privacy incident response plans .

Oregon

2026-04-08