EHR Privacy Analyst

EHR Privacy Analyst

Location: Swift Square, Dublin 9 and Kilkenny (Hybrid)

Job type: Fixed-Term (6 months)
Hours: 39 hours per week

Closing Date: 19/11/2026

Overview of role:

To provide specialist privacy advice to the Cúram programme, ensuring that GDPR, regulatory, and organisational requirements are considered and embedded throughout the design, implementation, and deployment of the EHR solution and its associated processes, integrations, and data flows.

Primary Duties and Responsibilities:

· Provide specialist advice and guidance on data protection, privacy, and information governance matters associated with the Cúram programme.
· Support the development, maintenance, and review of programme privacy documentation, including Records of Processing Activities, Data Protection Impact Assessments, Legitimate Interest Assessments, Transfer Impact Assessments, and related governance artefacts.
· Advise project teams on GDPR compliance, privacy by design principles, and information governance considerations throughout the design, build, testing, deployment, and implementation phases of the programme.
· Review supplier contracts to identify data protection requirements, including Data Processing Agreements.
· Support the assessment and documentation of data flows between the EHR and integrated systems, ensuring appropriate privacy and information governance controls are considered and documented.
· Collaborate with the Records Manager and programme stakeholders to ensure records retention, archiving, disposal, and information lifecycle management requirements are incorporated into the EHR solution and supporting processes.
· Review new and updated programme policies, procedures, standards, operational processes, and governance documents to identify and incorporate relevant data protection, privacy, records management, and information governance requirements.
· Map the process for Data Subject Rights requests, ensuring EHR related procedures and system capabilities support compliance with GDPR requirements for access, rectification, erasure, restriction, objection, and data portability requests.
· Support the review and update of privacy notices, consent materials, and other transparency documentation to ensure processing activities introduced through the EHR programme are accurately documented and communicated.
· Identify, assess, and document privacy and data protection risks arising from programme activities, ensuring risks are appropriately recorded within the Data Protection Risk Register, assigned to relevant risk owners, and supported by proportionate mitigation actions.
· Support the investigation and resolution of privacy, confidentiality, and information governance issues arising during programme delivery, including testing, data migration, go-live, and post-implementation activities.

Qualifications & Experience:

Required

• Masters of Law (LLM)
• Minimum of 8 years Legal and/or Data Protection experience

Preferred

• Second Language is Desirable

Please contact loftusa@upmc.ie for queries relating to the recruitment process or role.

Please note that UPMC reserves the right to close this recruitment campaign earlier than the advertised closing date if a high volume of applications is received or if a sufficient number of suitable candidates have been identified. We therefore encourage you to submit your application as early as possible.

This job description is intended to be an outline of the areas of responsibility. As UPMC and the post holder develop, this job description may be subject to review in light of the changing needs of the business.

Equal Opportunity Statement and Benefits

UPMC is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

At UPMC we provide a total rewards program that is not only market competitive, but fair and provides growth opportunities for all our colleagues.

Benefits – Fully paid maternity and paternity leave for new parents. Competitive Pension Plan, company funded Death in Service Benefit x 3 times. Critical Illness cover for all employees up to the age of 66.

Performance and Recognition – Rewards for performance that supports the goals and mission of UPMC through our annual ACES programme.

Work-Life Balance – Enhanced annual leave up to a maximum of 27 days. Flexible working opportunities to support you to work around external family commitments.

Development and Career Opportunities – Opportunities for each employee to reach their career goals through continued learning and/or advancement.

About UPMC

UPMC is a renowned multinational academic medical centre committed to delivering people-focused care that’s close to home. Headquartered in Pittsburgh and affiliated with the University of Pittsburgh Schools of the Health Sciences, UPMC shapes the future of health through clinical and technological innovation, research and education. UPMC expands its expertise globally, bringing world-class care across continents through its UPMC International division — an owned and operated network of hospitals and ambulatory care centres in Italy, Ireland and Croatia. UPMC International brings new access to the signature specialty services of UPMC Hillman Cancer Centre, UPMC Sports Medicine and others to more people in more places around the world.

In Ireland UPMC has provided high-quality healthcare in the South East since 2006. UPMC’s operations in Ireland now include UPMC Whitfield Hospital in Waterford, UPMC Sports Surgery Clinic in Dublin, UPMC Kildare Hospital in Clane, and UPMC Aut Even Hospital in Kilkenny. Outpatient care is available at the UPMC Carlow Outreach Centre, UPMC Hillman Cancer Centre radiotherapy locations in Waterford and Cork, UPMC The 4th Practice in Mallow, and across UPMC Sports Medicine Clinics in Dublin, Waterford, Limerick, Tipperary, Cork, and Mayo. UPMC has also established a nationwide Concussion Network. UPMC's Global Technology Operation Centre is based in Kilkenny.