Privacy Officer Location: Toronto-661 University
Department: Legal Office
This posting is to fill a current vacancy.
The Role: To provide expertise in information privacy and access legislation across PHO including the development, implementation, maintenance, and monitoring for compliance of PHO policies and procedures covering the privacy of, and access to, information (including personal health information) in compliance with applicable provincial and federal laws and the PHO's information privacy practices.
To provide functional leadership to staff across PHO assigned as members of the Privacy Subcommittee and Privacy Representatives to ensure coordination of activities and advice in the resolution of privacy protection and data security issues and the management of access requests.
Key Responsibilities- Provides expertise and leadership in privacy across PHO and oversees compliance with privacy practices and consistent application of sanctions for failure to comply with privacy policies for all who deal with or have access to PHO information, including PHO staff, extended workforce, and all business associates, in cooperation with PHO leadership, including Human Resources, Chief Information Officer, Technology Services, and Chief Legal & Privacy Officer, as applicable.
Provides functional leadership to Portfolio Privacy Representatives assigned as part of Privacy Subcommittee and external to Privacy Subcommittee to ensure coordination of efforts, resolution of elevated issues, and consistent interpretation and application of legislation, policies, and PHO practices.
Drafts, recommends, implements, and maintains PHO information privacy policies and procedures in coordination with PHO senior management and administration, and legal counsel.
Maintains current knowledge of applicable federal/provincial/territorial laws,



global standards, privacy expectations and information privacy technologies to ensure PHO is up-to-date and compliant with current and emerging requirements and standards.
Initiates and facilitates and promotes activities to foster information privacy awareness as an key value and expectation within the organization.
Oversees, delivers, or ensures delivery of privacy training and orientation to all employees, adjunct/associate scientists, and other third parties.
Works with personnel involved with any aspect of release of personal information to ensure full coordination and cooperation under the organization's policies, procedures and legal requirements, including privacy protection, secure communication, and releases of personal information through appropriate channels to the correct parties.
Works with Chief Legal & Privacy Officer, key departments, and committees to ensure that PHO has and maintains appropriate privacy and confidentiality consent, authorization forms, and information notices and materials reflecting current organization and legal practices and requirements.
Leads the development, implementation and maintenance of strategies and tactics to ensure process efficiencies in receiving, documenting, tracking, processing, and rendering decisions on access to information requests under the Freedom of Information & Protection of Privacy Act (FIPPA) and the Personal Health Information Protection Act,



2004 (PHIPA).
Prepares submissions to the Information and Privacy Commissioner (IPC) respecting PHIPA and FIPPA matters and coordinates with IPC staff in any compliance reviews or investigations.
Performs initial and periodic privacy risk assessments and evaluations and conducts ongoing related compliance monitoring.
Plans, reviews, leads and/or conducts Privacy Impact Assessments (PIAs) as required.
Establishes with management and operations a mechanism to track access to confidential information, especially personal health information.
Establishes and administers a process for receiving, documenting, tracking, investigating, and taking action on all privacy issues or complaints, in coordination and collaboration with senior management and, as appropriate, Chief Legal & Privacy Officer.
Reviews all system-related information security plans throughout the organization's network, working together with IT and security personnel to ensure effective protection of privacy and confidentiality at PHO.
Reviews contracts and agreements to ensure third-party compliance with appropriate privacy expectations and applicable privacy legislation.
Participates and provides advice in the development, implementation, and ongoing compliance monitoring of all partner and business associate agreements, to ensure all privacy, confidentiality and non-disclosure concerns, requirements, and responsibilities are addressed.
Ensures that appropriate privacy protections are included in data-sharing agreements with multiple scientific partners, including hospitals, institutes, individual physicians, and other organizations collaborating on projects with PHO.
Develops written and verbal responses to issu

#J-18808-Ljbffr

📌 Privacy Officer (Ontario)
🏢 Publichealthontario
📍 Ontario