Chief Compliance & Privacy Officer
The Chief Compliance and Privacy Officer (CCPRCO) is accountable for the integrity, ethics, privacy, and research compliance program across Tamp General Hospital System — including hospital operations, ambulatory/medical group, academic affiliations, sponsored research, and clinical trials. Reports directly to an Executive Vice President and Board Audit & Compliance Committee.
Essential Functions\:
- Lead the Enterprise Compliance Program across the AMC system — hospital, medical group, research enterprise, and academic affiliations — ensuring alignment with the OIG's 7 elements of an effective compliance program.
- Serve as principal compliance advisor to the CEO, Cabinet, and Board Audit & Compliance Committee, delivering reporting, risk updates, and executive-session briefings.
- Direct the enterprise HIPAA Privacy & Security Program in partnership with the Chief Information Security Officer (Cyber Security), including breach risk assessments, OCR response, patient rights, and data-sharing governance.
- Oversee the Research Compliance Program, including human subjects protections (Common Rule), FDA GCP, IRB liaison, NIH/PHS conflict of interest, clinical trial billing (Medicare Coverage Analysis), and research misconduct procedures.
- Lead the annual enterprise compliance risk assessment and work plan, translating regulatory change and audit findings into a prioritized, board-approved roadmap.
- Lead internal investigations and government inquiry response — OIG, DOJ, CMS, OCR, FDA, state AG — including disclosures (SRDP, OIG SDP) and Corporate Integrity Agreement (CIA) management.
- Oversee coding, billing, and reimbursement integrity programs, including charge audits, payer audit defense, Stark/Anti-Kickback compliance, 340B, and EMTALA monitoring.
- Direct the Code of Conduct, ethics hotline, and policy architecture, ensuring consistent standards, enterprise training (≥98% completion), and a strong speak-up culture.
- Partner across the system with internal and external stakeholders to embed compliance into clinical, academic, and operational decision-making.