Company Description HealthFlow AI enables healthcare organizations to streamline communication and automate administrative workflows through practical AI solutions. The company specializes in AI-powered workflow automation, patient communication, and operational efficiency tools that reduce administrative burdens and improve service delivery. HealthFlow AI focuses on building secure, scalable technologies that integrate smoothly with existing healthcare systems.

Team members collaborate with healthcare partners to design solutions that support better patient experiences and more effective operations. The organization values innovation, accountability, and a strong commitment to data privacy in all products and services.

Role Description The Privacy Impact Assessment Contractor is a full-time remote role responsible for evaluating how HealthFlow AI’s products and processes handle personal and sensitive data. This role involves conducting privacy impact assessments on new and existing solutions, mapping data flows, and identifying privacy risks and mitigation strategies. The contractor will collaborate with product, engineering, legal, compliance, and security teams to ensure privacy-by-design principles are integrated throughout the development lifecycle.

Day-to-day tasks include reviewing technical and process documentation, preparing clear assessment reports, recommending improvements aligned with healthcare privacy regulations,



and supporting internal teams with guidance and training on privacy best practices. The role may also contribute to developing privacy standards, templates, and procedures to maintain consistent and compliant practices across the organization.

Qualifications

- Strong analytical skills, including the ability to interpret complex data flows, assess risk, and prioritize privacy controls.
- Excellent communication skills, with experience explaining privacy findings and recommendations to both technical and non-technical stakeholders.
- Demonstrated experience in privacy or security assessment, including conducting Privacy Impact Assessments or Data Protection Impact Assessments.
- Background in education and training related to privacy, data protection, or compliance, with the ability to develop and deliver clear guidance and materials.
- Knowledge of healthcare data privacy regulations and standards (e.g., HIPAA, applicable data protection laws) and familiarity with AI or software-as-a-service environments.
- Bachelor’s degree in a relevant field such as Information Security, Law, Compliance, Health Informatics, or equivalent practical experience.
- Ability to work independently in a remote setting, manage multiple assessments, and meet deadlines with minimal supervision.
- Professional certifications in privacy or security (e.g., CIPP, CIPM, CISSP, or similar) are beneficial.

📌 Privacy Impact Assessment Contractor (Canada)
🏢 HealthFlow AI
📍 Canada