Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Provides expertise in information privacy and access legislation across PHO, developing, implementing, and monitoring compliance of policies and procedures. Offers functional leadership to the Privacy Subcommittee and Privacy Representatives to ensure coordination and advice on privacy protection, data security, and access requests.

Responsibilities

• Provides expertise and leadership in privacy across PHO and oversees compliance with privacy practices and consistent application of sanctions for failure to comply with privacy policies for all who deal with or have access to PHO information.
• Provides functional leadership to Portfolio Privacy Representatives to ensure coordination of efforts, resolution of elevated issues, and consistent interpretation and application of legislation, policies, and PHO practices.
• Drafts, recommends, implements, and maintains PHO information privacy policies and procedures.
• Maintains current knowledge of applicable federal/provincial/territorial laws, global standards, privacy expectations and information privacy technologies.
• Initiates and facilitates and promotes activities to foster information privacy awareness within the organization.
• Oversees, delivers, or ensures delivery of privacy training and orientation to all employees, adjunct/associate scientists, and other third parties.
• Works with personnel involved with any aspect of release of personal information to ensure full coordination and cooperation under the organization’s policies, procedures and legal requirements.
• Works with Chief Legal & Privacy Officer, key departments, and committees to ensure that PHO has and maintains appropriate privacy and confidentiality consent, authorization forms, and information notices and materials.
• Leads the development, implementation and maintenance of strategies and tactics to ensure process efficiencies in receiving, documenting, tracking, processing, and rendering decisions on access to information requests.
• Prepares submissions to the Information and Privacy Commissioner (IPC) respecting PHIPA and FIPPA matters and coordinates with IPC staff in any compliance reviews or investigations.
• Performs initial and periodic privacy risk assessments and evaluations and conducts ongoing related compliance monitoring.
• Plans, reviews, leads and/or conducts Privacy Impact Assessments (PIAs) as required.
• Establishes with management and operations a mechanism to track access to confidential information, especially personal health information.
• Establishes and administers a process for receiving, documenting, tracking, investigating, and taking action on all privacy issues or complaints.
• Reviews all system-related information security plans throughout the organization’s network, working together with IT and security personnel to ensure effective protection of privacy and confidentiality at PHO.
• Reviews contracts and agreements to ensure third-party compliance with appropriate privacy expectations and applicable privacy legislation.
• Participates and provides advice in the development, implementation, and ongoing compliance monitoring of all partner and business associate agreements.
• Ensures that appropriate privacy protections are included in data-sharing agreements with multiple scientific partners.
• Develops written and verbal responses to issues, and prepares reports, briefing materials, and draft risk assessments and evaluations.
• Other related duties as assigned.

Requirements

• Knowledge of contract law and techniques for drafting legal agreements.
• Knowledge and understanding of the Personal Health Information Protection Act, 2004 (PHIPA) and the Freedom of Information and Protection of Privacy Act (FIPPA).
• Working knowledge of tri-council and research guidelines.
• Knowledge of privacy practices, concepts, trends and issues, and an understanding of their impact on business processes.
• Knowledge of, and expertise in policy development and analysis.
• Familiarity with information and information technology security matters.
• Knowledge of, and expertise in, applying privacy enhancing best practices.
• Knowledge of applicable federal/provincial/territorial laws, global standards, privacy expectations and information privacy technologies.
• Knowledge of, and expertise in, access to information processes and decisions.
• Knowledge of, and expertise in, conducting Privacy Impact Assessments (PIAs).
• Computer skills with proficiency in MS Office (Word, Excel, PowerPoint, Visio, and Adobe Acrobat).
• Skills in accessing databases for legal searches, legislation searches, privacy and access to information precedents, and issues analysis.
• Written communication skills to develop policies, issues notes, training and other related materials.
• Oral and written communication skills, and presentation skills.
• Communication and interpersonal skills to provide expertise across PHO and advise on compliance.
• Proactively develops and maintains client relationships.
• Works with personnel involved with any aspect of release of personal information to ensure full coordination and cooperation.
• Anticipates clients’ needs when independently investigating on matters related to privacy.
• Handles matters of a confidential and/or sensitive nature, which may also be contentious and/or politically sensitive, with judgement.
• Determine the steps to take to ensure the PHO’s compliance with privacy practices.
• Determines the most effective and appropriate ways to ensure that appropriate privacy protections are included in data-sharing agreements.
• Accountable for the quality of research and policy analysis.
• Accountable for initiating, facilitating, and promoting activities in PHO to foster information privacy awareness.
• Accountable for the quality of advice and participation in the development, implementation, and ongoing compliance monitoring of all partner and business associate agreements.
• Provides advice directly to senior management, up to and including the President and CEO.
• Provides functional leadership to staff across PHO assigned as members of the Privacy Subcommittee and Privacy Representatives.
• Works collaboratively with the Chief Legal & Privacy Officer and the other staff in the Office to assist them in the development of system enablers such as staff protocols and guides for dealing with legal warrants.

Skills

• Information privacy
• Access legislation
• Policy development
• Policy implementation
• Policy maintenance
• Compliance monitoring
• Privacy training
• Data security
• Access requests
• Privacy risk assessments
• Privacy Impact Assessments (PIAs)
• Contract law
• Legal agreements
• PHIPA
• FIPPA
• Tri-council guidelines
• Research guidelines
• Information technology security
• MS Office (Word, Excel, PowerPoint, Visio, Adobe Acrobat)
• Database access
• Legal searches
• Legislation searches
• Written communication
• Oral communication
• Presentation skills
• Interpersonal skills
• Client relationship management
• Investigation
• Policy analysis

Location

• Toronto

Work Type

• Full-time

Experience Level

• Minimum of 10 years’ experience and knowledge of, and expertise in the application of information privacy laws, access, release of information, and release control technologies, as well as information security is required.

Education Level

• A Bachelor’s degree in a related field (e.g. public administration, business administration) or equivalent combination of education and experience is required.
• Recognized privacy certification such as Certified Information Privacy Professional of Canada preferred.
• Information Security accreditation is preferred.

Salary/Compensations

• $110,443.00 - $154,608.00

About the Company

• PHO is committed to ensuring equity in employment.
• Our goal is to create a diverse, inclusive workforce that reflects the communities we serve and to ensure our services and communications are accessible to all individuals.

Equal Opportunity

• PHO is committed to ensuring equity in employment.
• Our goal is to create a diverse, inclusive workforce that reflects the communities we serve and to ensure our services and communications are accessible to all individuals.
• Any candidate who requires a job posting in an alternative format may email a request to HR_Inquiries@oahpp.ca.
• Once an applicant has been selected for an interview, they can inform PHO about any accommodations they may require at any stage of the interview process.