RQ09697 - Privacy Impact Assessment (PIA) Specialist - Senior

Description:

Deliver timely privacy products and services to support and guide HSC’s compliance with privacy rules and regulations. High quality privacy products are expected to be created through services including advise and collaborate with a variety of roles from senior executives to privacy/security experts, data users, business program areas through different engagement formats including and not limited to individual discussions, facilitated workshops to complete the deliverables below.

• Develop platform level Privacy Policy Procedure Handbook to meet HSC’s PHIPA roles requirements (HINP, Agent, ESP).
  


• Develop platform level Privacy learning module with content that are easy to understand for all data roles who would be coming to the Health Data Utility, in compliance to HSC’s PHIPA roles requirements. This includes visual and audio forms of content.
  


• Conduct privacy impact assessments, develop risk mitigation plans, service level agreements, and other privacy legal related documents required to onboard groups within Ontario Public Service and Broad Public Sector Organizations (BPSOs) to the Health Data Utility platform.
  


• Support the development of public health domain specific privacy educational materials under Public Health Domain Data Steward guidance, as needed.
  

Requirements

Experience and Skill Set Requirements:

Must Haves:

• Minimum 10+ years of operational experience applying Privacy by Design within the framework of Ontario’s Personal Health Information Protection Act, 2004 (PHIPA) and, Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA), preferably in or related to the health care sector.
  


• Minimum 10+ years’ of demonstrated knowledge in writing IPC (or similar organization) compliant policies and supporting documents to enable cloud-based platforms for varied audiences – from senior executives to privacy experts and data consumers, with working knowledge of digital health technologies and information security industry standards.
  


•  7+ years of in-depth experience in preparing and delivering privacy training and education in plain language.
  


• Excellent interpersonal and communication skills, both written and oral with the ability to communicate complex ideas in easy-to-understand terminology. Excel in a fast-paced environment.
  


• Excellent analytical, organizational, research, and presentation skills.
  

Skill Set Requirements:

Canadian and Ontario Health Privacy Legislation(PHIPA, FIPPA, PIPEDA):

• Minimum 10+ years of operational experience applying Privacy by Design within the framework of Ontario’s Personal Health Information Protection Act, 2004 (PHIPA) and, Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA), preferably in or related to the health care sector.
  


• A recognized privacy designation (CIPP/C) is an asset.
  


• Familiarity with other privacy related legislation (e.g., PIPEDA, OAHPP) is an asset.
  

Privacy Policy Procedure:

• Minimum 10+ years’ of demonstrated knowledge in writing IPC (or similar organization) compliant policies and supporting documents to enable cloud-based platforms for varied audiences – from senior executives to privacy experts and data consumers, with working knowledge of digital health technologies and information security industry standards.
  

Privacy acumen and operational activities:

• 7+ years of in-depth experience in preparing and delivering privacy training and education in plain language.
  


• Excellent interpersonal and communication skills, both written and oral with the ability to communicate complex ideas in easy-to-understand terminology. Excel in a fast-paced environment.
  


• Excellent analytical, organizational, research, and presentation skills.
  

Public Sector Experience:

• Minimum 8+ years’ operational experience working with Public Sector organizations
  


• Experience working with the Ontario Public Service (OPS) and Broader Public Sector Organizations (BPSOs), such as Public Health Ontario, Public Health Agency of Canada (PHAC), etc., is an asset.
  


• Experience with Health and Health care sector is an asset.