Department Office of the Vice-President, Finance & Administration

OCAD University acknowledges the ancestral territories of the Mississaugas of the Credit, the Haudenosaunee, the Anishinaabeg and the Huron-Wendat, who are the original owners and custodians of the land on which we live, work and create

OCAD University , Canada’s largest and oldest art and design university, is a vibrant community of bold, curious and compassionate artists, designers and scholars who are imagining and creating a joyful, equitable and sustainable world. The University is an internationally renowned hub for art, design, digital media, research, innovation and creativity, and arts administration. It embraces collaborative and interdisciplinary approaches to change-making through art, design-thinking curriculum and research, making OCAD U a local, regional, national and global leader in art and design.

It is an exciting time to join the OCAD U community as the University is at a key stage in its institutional transformation, with the implementation of its Academic and Strategic Plan and guiding principles — driving positive impact; decolonization, indigenization and equity; environmental sustainability; emerging as a vibrant hub; student centered approaches; innovation in learning teaching and research; and financial stewardship.

Reporting to theVice-President, Finance and Administration(VPFA), thePrivacySpecialistacts asOCAD University’ssubject matter experton matters related to access to information, protection of privacy, and records management.Responsibilities include proper application ofaccess andprivacylegislation, processing access to information requests, promoting proper records retention and good record-keeping practices,



completing privacy and security impact assessments, investigating privacy breaches and privacy complaints, and promoting a culture of privacy protectionand good information governance at theUniversity.

The Privacy Specialist operates independently and exercises qualified judgment while keeping the VPFA informed of significant privacy and records management matters, breaches, investigations, compliance issues and emerging institutional risks, and is responsible for ensuring the University is in compliance with relevant privacy and access legislation. The Specialist must have knowledge of legislative requirements and must maintain an ongoing awareness of developments in the areas of privacy and records management, and the implications of those developments for theUniversity.

Summary of Responsibilities

Privacy (70%)

- Independentlyprovideauthoritative adviceon the University’s obligations underaccessand privacy legislationOntario’sFreedom of Information and Protection of Privacy Act(FIPPA) andPersonal Health InformationProtectionAct(PHIPA)arecollectively referred to as “Privacy Law”.
- Prepare regular reports,analysesandstrategic advicefor the VPFAregardingprivacy compliance, records management, emerging risks, breaches,trendsand information governance matters
- Develop institutional privacy frameworks and provide strategic advice and recommendationsregardingprivacy,



informationgovernanceand related institutional risks
- Provide information, guidance and advice to the University community andgeneral publicregardingquestions about privacy and information access requests at the University
- Respond to the University’s access for information requests, ensuring compliance with Privacy Law
- Provide guidance and information to requestors(both internal and external to the University) with their access requests
- Direct and coordinate the retrieval of informationrelevant to access requests with staff,facultyand administration
- Prepare responses to requests for informationthrough review and consolidation of retrieved information
- Interpret Privacy Lawin order tomake informed decisionsregardingthe application of exemptions and exclusions to the information requested, if applicable, including researching relevant orders and judicial review decisions
- Respond and act on behalf of theUniversity when decisions on access are appealedtothe Information and Privacy Commissionerof Ontario(IPC)
- Receive and investigate privacy-related complaints, and respond to the IPC assigned analyst in cases of formal privacy complaints against the University
- Lead theresponse to privacy breaches at the University through the collection of relevant informationand providing subject matterexpertisetosenior administratorsfor informeddecision-making
- Work withITin cases of cybersecurity incidents involving personal information.
- Coordinate any required involvement from legal counsel through liaising with the Office of the Vice-President, Finance and Administration
- Submit all mandatory reporting to the IPCand prepares annual reports o

📌 Privacy Specialist (Toronto)
🏢 OCAD University
📍 Toronto