The facility Privacy/FOIA Officer has oversight for the data governance program and initiatives in the VHA Medical Center or Healthcare System and its supporting catchment area. The position makes unique facility-level determinations about disclosure, issuance of denials, redactions, access , use and dissemination of federal agency records. The position formulates policy, ensures compliance with federal and state laws and conducts thorough research of federal implementation regulations.

Duties

Duties include but are not limited to: This position is responsible for administering, analyzing, and performing work involved in establishing, disseminating or managing Government information within the, Veterans Health Administration (VHA) Healthcare Centers. Government Information Specialists formulate policy, advise agency and facility management, and ensure compliance with all Federal and State laws governing the collection, maintenance and disclosure of information. The work also involves the safeguarding of Government information while supporting accountability and transparency. The Government Information Specialist reports to the Chief, Business Office. Government Information Specialist implements policies and procedures to manage information and provides information-related assistance and services to Veterans, the general public, Congress and VA staff members. The work requires interpreting and applying laws, regulations, policies, and guidance to provide access to VA agency records and information, while ensuring protected health information is appropriately used and disclosed. The Privacy/FOIA Specialist makes determinations about disclosures, issuance of denials, redactions, monitoring and access to Federal agency records and use and disclosures of individually-identifiable health information. The Government Information Specialist focuses on the Freedom of Information Act (FOIA), Privacy Act (PA), Health Insurance Portability and Accountability Act (HIPAA), Title 38 United States Code (U.S.C) §§ 5701, 5705 and 7332 statutes, and VA implementing regulations that govern the collection, maintenance, and release of information from VA records. Implements, manages and monitors the Privacy and FOIA programs in the facility by distributing information; preparing facility-specific policy guidance; reviewing facility processes and workflow to ensure information is appropriately safeguarded, used and disclosed; reviewing all contracts and other facility agreements for privacy and other appropriate language; and assessing the facility privacy posture through evaluation of the facility's collection, use, storage and maintenance of sensitive personal information. Coordinates program implementation and management with higher organizational levels and prepares reports and information. Advises management and staff on Title 38 U.S.C. Sections §§ 5701, 5705 and 7332, PA, FOIA and, where appropriate, HIPAA requirements, policies, and procedures and ensures that facility managers and staff understand and fulfill their responsibilities. Develops facility privacy and FOIA policies and procedures in compliance with VA privacy policies and ensure appropriate implementation within the facility. Ensures all disclosures of individually-identifiable information by the facility are performed in accordance with all applicable federal privacy laws and regulations, including Title 38 U.S.C. Sections §§ 5701, 5705 and 7332, PA, FOIA and HIPAA Privacy Rule, and VHA policy. Develops and implements processes to ensure a compliant monitoring program is in place consistent with VA/VHA policies and procedures. A compliant monitoring program consists of establishing documented processes for monitoring, developing monitoring tools, conducting monitoring according to VHA policies, analyzing the monitoring results to determine trends and deficiencies and the implementation of remediation activities of areas found to be non-compliant. Monitors on a monthly, quarterly or annual basis policies and procedures to include VHA Notice of Privacy Practices, Privacy Training and Continued Awareness, Reasonable Safeguards, Right of Access, Amendments, Release of Information and Accounting of Disclosures, Facility Directory, Confidential Communications, Data Destruction, Complaints and Incidents, Business Associate Agreements and Contracting, and Information Access. Work Schedule: Monday-Friday, 8:00am - 4:30pm Virtual: This is not a virtual position. Position Description/PD#: Government Information Specialist/PD90388-0 Relocation/Recruitment Incentives: Not Authorized Critical Skills Incentive (CSI): Not Approved Financial Disclosure Report: Not required

Requirements

Qualifications

To qualify for this position, applicants must meet specialized experience requirements within 30 days of the closing date of this announcement, 06/05/2024. Time-In-Grade Requirement: Applicants who are current Federal employees and have held a GS grade any time in the past 52 weeks must also meet time-in-grade requirements within 30 days the closing date of this announcement. For a GS-12 position you must have served 52 weeks at the GS-11. The grade may have been in any occupation, but must have been held in the Federal service. An SF-50 that shows your time-in-grade eligibility must be submitted with your application materials. If the most recent SF-50 has an effective date within the past year, it may not clearly demonstrate you possess one-year time-in-grade, as required by the announcement. In this instance, you must provide an additional SF-50 that clearly demonstrates one-year time-in-grade. Note: Time-In-Grade requirements also apply to former Federal employees applying for reinstatement as well as current employees applying for Veterans Employment Opportunities Act of 1998 (VEOA) appointment. You may qualify based on your specialized experience as described below: Specialized Experience: You must have one year of specialized experience equivalent to at least the next lower grade, GS-11, in the normal line of progression for the occupation in the organization. Examples of specialized experience would typically include, but are not limited to: Works independently with little supervision as a Privacy/FOIA officer; utilizes through frequent work on policy, requests, proposals, and briefings a comprehensive knowledge of the Privacy Act, HIPAA and privacy enforcing regulations; conducts thorough research of implementing regulations and policies and procedures to manage agency/organization information; processes privacy incidents/complaints and investigates allegations of illegal or improper activities related to the handling or release of Privacy Protected Information (PPI); develops Privacy and FOIA training materials and provides training to staff and programs, on those materials; provides assistance and services to the general public, staff members and communicate information to the leadership, facility staff and outside stakeholders; manages the information privacy process for a major research program; coordinates, reviews and completes Privacy Threshold Analysis (PTA) and Privacy Impact Assessments (PIA), Note: Experience must be fully documented on your resume and must include job title, duties, month & year starting and ending dates AND hours worked per week. You will be rated on the following Competencies for this position: Information AssuranceInformation ManagementInternal Controls/IntegrityOrganizational Awareness Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religions; spiritual; community; student; social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Note: A full year of work is considered to be 35-40 hours of work per week. Part-time experience will be credited on the basis of time actually spent in appropriate activities. Applicants wishing to receive credit for such experience must indicate clearly the nature of their duties and responsibilities in each position and the number of hours a week spent in such employment. Physical Requirements: The Specialist is required to perform privacy walk-throughs throughout the facility, travel to surrounding Clinic Based Outpatient Clinics, and visit local Business Associates place of business or record storage locations, so there may be on certain days a lot of walking. Other than the limited amount of walking there are no unusual physical demands. For more information on these qualification standards, please visit the United States Office of Personnel Management's website at https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/.

Education

There is no educational substitution at this grade level.

Contacts

• Address White City VA Medical Center 8495 Crater Lake Highway White City, OR 97503 US
• Name: John Buan
• Phone: 503-220-8262 X59964
• Email: [email protected]