The Information and Privacy Officer at CAMH is responsible for managing all aspects of the privacy program, including program implementation and monitoring, policy development, stakeholder relations, investigations, auditing, and education initiatives. Reporting to the Director, Clinical Informatics and Health Information Services, the Information and Privacy Officer ensures the confidentiality, integrity, and security of sensitive patient information, oversees compliance with privacy regulations, develops information governance policies, and educates staff on privacy best practices.

Privacy Policy

Development (20%): Develop and update policies, procedures, and training materials relating to privacy compliance with PHIPA and FIPPA. Develop strategies to ensure regulatory compliance. Ensure policies reflect the unique considerations of mental health patient information.

Process and manage patient correction requests under PHIPA. Conduct regular audits to assess adherence to privacy policies and regulations. Data Management (15%): Advise on hospital practices for access to and management of personal health information and personal information to ensure regulatory, policy, and contractual compliance.

Maintain the hospital Index of Personal Information Banks. Investigate privacy breaches and complaints promptly. Report and document incidents in accordance with legal requirements. Conduct PIAs or privacy reviews for new or changing systems, processes, or initiatives involving personal health information and personal information.

Consult with program stakeholders on recommendations to mitigate privacy risks and ensure compliance with regulations. Training and Education (10%):



Provide ongoing training to staff on privacy laws, policies, and best practices. Support a healthy workplace that embraces diversity, encourages teamwork, and complies with all applicable regulatory and legislative requirements.

Conduct regular privacy audits to assess data access and handling practices. Address inquiries related to personal health information and personal information handling practices.

Education & Specific Training ~ Bachelor's degree or equivalent related experience. Designation as a Certified Information Privacy Qualified/Canada (CIPP/C) considered a strong asset. Minimum of three (3) years related work experience (experience may include front office support in a clinical program, privacy consultancy, health records, release of information experience, entry-level work in a privacy and access management office).

Strong working knowledge of the Personal Health Information Protection Act (PHIPA) and either the Freedom of Information and Protection of Privacy Act (FIPPA) or the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA). Leadership experience in driving and executing compliance programs and knowledgeable in process management, analysis, operational improvement, and risk management. Enthusiastic, flexible,



and capable of working independently and in a team setting, demonstrating excellent interpersonal, organizational, and communication skills (both written and oral).

Proficient in Microsoft Office including Word, Excel, and PowerPoint. Bilingualism (French/English) and/or proficiency in a second language is an asset. Includes participation in HOOPP defined benefit pension plan, extended health and dental benefits, paid vacation starting at 4 weeks, flexible work arrangements, and ongoing professional development support.

This role allows professionals to apply their expertise in a mission-driven environment dedicated to public health outcomes. As a CAMH employee, you will contribute to our mission by supporting teaching, research, and clinical care across the hospital. CAMH is dedicated to equity, diversity, and inclusion.

Our commitment is to foster a workplace, teaching, and learning environment that is inclusive, respectful, and free from discrimination or harassment. CAMH strongly encourages applications from candidates who reflect the diversity of the communities we serve, including First Nations, Métis, and Inuit Peoples; Black and other racialized communities; LGBTQ2S+ communities; women; and people with disabilities, including those with lived experience of mental health and substance use challenges. Through its core values of Courage, Respect and Excellence, CAMH is implementing its Strategic Plan: Connected CAMH, to transform lives, ignite innovation and discovery, revolutionize education and drive social change.

To learn more about CAMH, please visit their website at: .

📌 Information & Privacy Officer- Information & Privacy Office, IMG (Toronto)
🏢 CAMH
📍 Toronto