Sandra Dorsett Email and Phone Number

• Leads teams that ensure compliance with privacy and personnel security requirements for several lines of business.• Establishes and implements policies and procedures to support compliance with the HIPAA Privacy Rule and related federal, state and contractual privacy requirements.• Provides leadership in planning, design and evaluation of company-wide privacy projects.• Coordinates, conducts and oversees risk assessments to identify risks and develop action plans.• Conducts ongoing compliance monitoring activities to ensure business units and subcontractors have appropriate administrative, technical, and physical controls in place to safeguard protected health information (PHI) and personally identifiable information (PII).• Conducts investigations and ensures resolutions of privacy complaints.• Prepares and submits complaint activity reports to Regional Director and management.• Collaborates with Health Net, Business Associates and providers to prevent and mitigate unauthorized disclosures.• Acts as key contact in ensuring consistent corrective and disciplinary actions for privacy violations.• Conducts sensitive privacy incident investigations and oversees reporting to Covered Entity and management.• Develops, oversees, and ensures delivery and tracking of privacy training to entire workforce and applicable Business Associates. • Initiates, facilitates and promotes activities to foster privacy awareness and adopt PHI safeguarding best practice. • Ensures compliance of beneficiary rights to obtain, amend, and restrict access to PHI.• Establishes and maintains internal and external professional relationships.• Cooperates with Defense Health Agency, Department of Veterans Affairs, Office of Civil Rights, and other legal authorities and personnel in compliance reviews and investigations.

Provide leadership in the planning, design and evaluation of company-wide privacy program. Same duties as above, except only for Health Net Federal Services, LLC.

• Implemented and amended privacy policies and procedures.• Performed privacy risk assessments and conducted ongoing compliance monitoring activities.• Investigated and helped resolve privacy complaints and provided Regional Director with complaint activity.• Collaborated with Health Net associates, Business Associates, and providers to mitigate and help prevent unauthorized disclosures• Communicated with customers to resolve their privacy concerns• Reported privacy incidents to Covered Entity and management• Ensured delivery of initial, annual, and other required privacy training to workforce. • Monitored and adopted industry best practices of information privacy controls.