Indiana Health Information Exchange
  • - Administrative
  • Indianapolis, IN, USA
  • Full Time

The Indiana Health Information Exchange (IHIE) is the nation's largest health information exchange organization.  IHIE connects disparate hospitals and physician offices, enabling medical information to follow patients regardless of treatment location.  We are seeking a General Counsel and Privacy Officer to lead our legal initiatives, guide IHIE decision making from a legal and compliance perspective, and join the IHIE leadership team.  If you enjoy complex legal and business issues in the areas of healthcare, healthcare IT and HIPAA, this position may be an excellent fit for you. 

Summary:  Advises IHIE on legal and regulatory issues relating to the development and implementation of its business strategy, governance and compliance policies, data privacy and security, and general business matters.  Initiates and supervises all activities related to the development, implementation, maintenance of, and adherence to IHIE's policies and procedures in compliance with federal and state laws, including, but not limited to, the privacy of, and access to, patient health information. Also provides legal perspective and guidance to information security policies, procedures, and technical systems in order to maintain the confidentiality, integrity, and availability of all IHIE systems containing PHI (protected health information). Crafts, negotiates, and approves legal agreements into which IHIE enters.


Legal Responsibilities:

  • Oversees and manages IHIE's legal affairs in coordination with IHIE management
  • Works with IHIE management and staff to expand IHIE's customer base and service offerings
  • Prepares corporate governance materials prior to Board meetings and committee meetings
  • Attends and prepares minutes for Board meetings and, as requested, committee meetings
  • Drafts and negotiates, in coordination with outside counsel as appropriate, contracts with customers and vendors
  • Supervises outside counsel
  • Advises IHIE management on risk management activities
  • Reviews and stays apprised of laws, rules and regulations relating to health information privacy, security and exchange
  • Provides legal support to Security Official
  • Participates in and supports IHIE government relations activities
  • Administratively orchestrate Indiana Network for Patient Care (INPC) governance meetings


Privacy Responsibilities:

  • Provides developmental guidance and assists in the identification, implementation, and maintenance of organizational information privacy policies and procedures in coordination with IHIE management
  • Performs or coordinates initial and periodic information privacy risk assessments and conducts related ongoing compliance monitoring activities in coordination with IHIE's other compliance and operational assessment functions
  • Oversees, directs, delivers, or ensures delivery of initial and ongoing privacy training and orientation to all employees, contractors, temporary employees, and any other appropriate third parties
  • Participates with management in the development, implementation, and ongoing compliance monitoring of all business associate agreements to ensure all privacy concerns, requirements, and responsibilities are addressed
  • Establishes a mechanism to track access to protected health information, within IHIE and as required by law to allow qualified individuals to review or receive a report on such activity
  • Establishes and administers a process for receiving, documenting, tracking, investigating, and taking action on all complaints concerning the organization's privacy policies and procedures in coordination and collaboration with other similar functions
  • Ensures compliance with privacy practices and consistent application of sanctions for failure to comply with privacy policies for all individuals in the organization's workforce, extended workforce, and for all subcontractors, in cooperation with IHIE Management and Human Resources
  • Initiates, facilitates, and promotes activities to foster information privacy awareness within IHIE and associated business partners
  • Serves as a member of, or liaison to, IHIE committees relating to privacy. Also serves as the information privacy liaison for users of applications containing PHI
  • Reviews all system-related information security plans throughout the organization's network to ensure alignment between security and privacy practices, and acts as a liaison to the information systems department
  • Works with all organization personnel involved with any aspect of release of PHI to ensure full coordination and cooperation under IHIE policies and procedures and legal requirements
  • Maintains current knowledge of applicable federal and state privacy laws and accreditation standards, and monitors advancements in information privacy technologies to ensure organizational adaptation and compliance
  • Serves as information privacy consultant to the organization for all departments and appropriate entities
  • Cooperates with Office of Civil Rights and other legal entities, and organization officers in any compliance reviews or audits
  • Works with management to represent IHIE's information privacy interests with external parties (state or local government bodies) who undertake to adopt or amend privacy legislation, regulation, or standard


IHIE Attributes:

  • Adaptability and flexibility in a rapidly changing environment
  • Self-starter and self-motivated
  • Ambitious spirit – brings fresh ideas to the table and finds creative solutions to problems
  • Positive attitude with outstanding communication and listening skills


  • Juris Doctor degree from an accredited law school
  • Admitted and in good standing to practice law in Indiana


Skills and Experience:

  • Knowledge and experience in transactional and regulatory legal matters
  • Knowledge and experience in information privacy laws, access, release of information, and release of control technologies
  • Knowledge in and the ability to apply the principles of HIM, project management, and change management
  • Strong analytical and critical thinking skills
  • Ability to influence others to achieve results
  • Ability to persuasively communicate complex concepts at the highest levels of business
  • Ability to act as an influential leader, advisor, mentor and coach
  • Demonstrated organization, facilitation, and presentation skills
  • Excellent verbal and written communication skills
  • Ability to work under pressure, and balance competing demands of customers and projects
  • Strong troubleshooting skills              



  • Certification, or willingness to obtain certification, in any of the following: CHA (Certified HIPAA Administrator), CHP (Certified HIPAA Professional), CHSS (Certified HIPAA Security Specialist), CSCS (Certified Security Compliance Specialist) along with education and experience relative to the scope of a health information exchange are a plus


In exchange for your legal expertise, we offer an excellent benefits package including medical/dental/vision, 401(k) matching, 20 days PTO your first year plus 9 company paid holidays, very casual work environment and dress code, and a dynamic, fun-loving company culture!

IHIE is the nation's largest and most advanced health information exchange helping to ensure health information is where it needs to be, when it needs to be there to improve care coordination and patient outcomes. IHIE was formed in 2004 and currently serves over 90 hospitals and processes more than 14 million clinical data transactions each month.  Learn more at

This position has been closed and is no longer available.
Indiana Health Information Exchange


  • Sign Up For Job Alerts

  • Follow Us On Social Media

  • Follow Our Jobs On Twitter
IHIE Twitter LinkedIn slideshare