Data Privacy Specialist
Dakota County
 Saint Paul, MN

General Description

POSTING TYPE: Open Competitive

DEPARTMENT: Social Services


PREFERRED HIRING RANGE: $48,974.00 - $55,096.00/year (106 Grade)

LOCATION: West St. Paul, NSC


CLOSE DATE: 4:30 p.m. on 10/30/2020

Come join us at Dakota County and “Be more“! The work County government does is unique. You will not be just another employee; you'll be a valued employee making a difference in the lives of Dakota County residents every single day. We employ nearly 1800 skilled individuals whose talents and contributions makes Dakota County a premier place to live and work. Will you be the next person to join us at Dakota County?

The Social Services Data Privacy Specialist is responsible for receiving, tracking and processing requests for data. This includes retrieving documentation from various systems, reviewing, preparing, redacting, consulting with county attorneys when appropriate and disseminating data records according to state and federal data privacy laws. This position will also review any internal department data privacy risks or concerns and consult with county data privacy officer. This position is responsible for ensuring data privacy activities are consistent with legal and county policy requirements and will consult and collaborate with other compliance experts and resources within Dakota County as needed.

Minimum Qualifications

High School Diploma (or GED)

Two years or more of customer service, administrative, or office experience

Plus, two or more of the following:

  • Two or more years of professional record management experience.
  • Completion of approved certificate or degree program related to legal assistant or paralegal
  • Completion of record management training program
  • One year or more experience in a medical or legal records department or similar setting


  • Equivalent combination of education and experience to equal or exceed five years

Preferred Qualifications:

Associate Degree in Legal Assistance/Paralegal

One year or more of working with medical records requests

Certification in data privacy and/or data security

Two or more years of experience redacting client files and records

Experience developing State and Federal data privacy compliance programs

Previous leadership experience

Duties & Responsibilities

These examples do not include all possible tasks in this work and do not limit the assignment of relatedtasks in any position of this classification.

  • Work directly with clients or other requesting entities to fulfill data requests using best practice guidelines for all Social Services programs; Child Protection, Adult Protection, Chemical Health, Mental Health and Disability programs, in compliance with statutory guidelines as they relate to State, inter-state, and Federal data privacy laws.
  • Lead and coordinate responses to legal entities for court hearings or eligibility data, including verification of legal access to records and required releases, as well as tracking and reporting.
  • Redaction of private and confidential data in compliance with state and federal data privacy laws.
  • Consult with internal staff for dissemination of current case documents.
  • Track, investigate, document, and follow through on incidental data privacy breaches within the department.
  • Use technology and electronic data management systems to identify records and information from clients, from multiple state and county computer systems.
  • Consult and collaborate with the County Attorney's Office or County Data Privacy Officer as needed regarding statutory compliance for records release.
  • Coordinate appeal and reconsideration processes.
  • Build expertise and serve as a resource on record retention and case destruction.
  • Conduct audits for regulatory compliance.
  • Other duties as assigned.

ESSENTIAL JOB FUNCTIONS: Duties 1-10 are essential functions

Knowledge, Skills & Abilities and Work Environment

  • Knowledge of the Health Insurance Portability Accountability Act (“HIPAA“), and the Minnesota Government Data Practices Act (“Data Practices Act“), the Minnesota Official Records Act and records administration law, Health Information Technology for Economic and Clinical Health (“HITECH“), federal regulations concerning the privacy of alcohol and chemical health treatment records (“Chemical Health Records Act“), and other state and federal laws and regulations concerning information privacy;
  • Ability to work independently, under minimal supervision, and as a team member.
  • Ability to develop and implement effective policies and tools, including training and compliance resources for employees.
  • Ability to communicate and interact with composure, professionalism, and discretion in person or by phone.
  • Ability to collaborate effectively with others across departments without a direct reporting relationship.
  • Ability to navigate several computer systems, and effectively use MS Office software and Adobe Professional software.
  • Ability to organize workload, meet deadlines and set work priorities.
  • Knowledge of IT and data management best practices as they inter-relate with State and Federal data privacy laws.
  • Knowledge of applicable State and Federal statutes.
  • Demonstrate an understanding of and respect for the diversity of clients, co-workers, and supervisors, including individuals with a disability, or whose first language may be other than English.

WORK ENVIRONMENT: Work is primarily sedentary, although there is some travel, and carrying of lighter weight items such as a laptop, notebooks, and work papers. The work is typically performed in an adequately lighted and climate-controlled office. May require occasional travel.

SELECTION PROCESS: The examination/selection process for this classification will consist of a rating of your training and experience from the application materials submitted. The top scoring candidates will be forwarded to the hiring department for further consideration.

Dakota County welcomes and is inclusive of diverse people, backgrounds, and perspectives. The County aims to reflect the community and clients it serves and fosters an equitable and respectful working environment where everyone is empowered to be their authentic selves.