Connie Wright Email and Phone Number

Shape and manage the organization's HIPAA Privacy and Corporate Compliance Program. My role is a blend of strategic leadership and hands-on implementation, overseeing crucial initiatives from regulatory compliance to data privacy. Notably, I've implemented the regulatory framework and privacy program for a new Part 2 Program, led the adoption of Health Information Exchanges (HIEs) and electronic systems for managing disclosures.• Spearheaded and manage the operations of the HIPAA Privacy Program across the Health System• Strategically implemented Part 2 Program to align with broader regulatory compliance initiatives• Lead the implementation of Health Information Exchanges (HIEs) to enhance data interoperability• Designed and oversee a comprehensive Third-Party Vendor Management Program, incorporating risk assessments, IT system onboarding, data collection, and approval workflows• Championed the implementation of and oversee electronic system for managing disclosures and Conflicts of Interest (COIs)• Direct crisis management for high-impact privacy incidents, including response and remediation• Drive a 60% reduction in data privacy incidents through proactive leadership and strategic initiatives• Designed, implemented and manage a program to audit, manage, and regulate third-party access to systems• Guide organizational adherence to healthcare data standards (e.g., HL7, CCD/CCDA, CDA)

Strategized and executed data privacy and security programs, including risk management, auditing, policy development, and awareness and training initiatives. Identified, selected, implemented and manage a privacy-monitoring tool to proactively identify policy and privacy violations.• Oversaw HIPAA breach notifications and coordinated OCR reporting• Conducted investigations to resolve HIPAA breaches• Implemented Cures Act compliance measures• Deployed Protenus auditing system using AI technology• Assessed and mitigated third-party privacy risks• Developed and implemented an auditing process for Business Associate Agreements (BAAs)• Assisted physician practices and hospitals in achieving Meaningful Use HIPAA compliance• Introduced ComplianceLine for anonymous reporting

Managed and led initiatives relating to Information Systems security and data privacy including, annual audits, incident management and tracking, incident response, exception tracking, disaster recovery, business continuity planning, root cause analysis, business impact analysis of systems, policy and procedure development.

As a Director of Distributed Systems Management, I was responsible for the development and management of the computer and server environment, which included their internal and external Help Desks, Server team, Desktop Support team and IT procurement. I was hired to develop completely new teams that had been previously outsourced. During my time there, I hired and managed 50+ employees, 20+ contractors and an outsourcing contract for network infrastructure.