I am the Corporate Compliance & Privacy Officer and report directly to the CEO. I am the lead interviewer/investigator, unless I delegate a task to a manager/director. For example, a nurse I needed to talk to was working the night shift, and the manager was going to see her at shift change the next day, so I gave the manager the questions to ask her.
Our HR department would not dictate-anything about how I handle these investigations, unless I wanted them to. I have my own policies/procedures, and my turn-around time depends on many things. If you have a turn-around time of 3 days, you're just setting yourself up for failure. What if you receive 5 privacy incidents in one day? You may be able to handle that if you have a department of more than one or two people, but for privacy issues, I am a department of one and may not get all of that done in 3 days. In addition, staff you need to interview may be out sick or on vacation. There are many reasons why policies and procedures should be clear on the process, but should also be somewhat vague on time frames, unless it's a law, regulation, etc.
Thank you Ximena!
SCCE Social Networks
HCCA Social Networks
Phone: +1 952.933.4977Toll - Free: email@example.com@hcca-info.org
Become a Member