Information Access and Privacy Specialist
Southlake Health CommunityWhy Join Our Team?
A best-in-class workplace environment that prioritizes a culture of belonging and wellness.
Progressive health and dental benefit plans.
HOOPP pension plan with employer and employee premium sharing.
Enhanced wellness initiatives, including virtual fitness classes and on-site gym memberships.
If you are ready to embrace this exciting challenge and contribute to the success of Southlake Health, we encourage you to apply and be part of our dedicated team, making a difference in the lives of our employees and the community we serve!
About the role:Southlake Health is seeking an Information Access and Privacy Specialist. This role will report to the Director, Quality, Risk, Patient Experience & Chief Privacy Officer (CPO). You will be responsible for ensuring that Southlake is compliant with Ontario's Personal Health Information Protection Act (PHIPA) and its Freedom of Information and Protection of Privacy Act (FIPPA) and for establishing and promoting privacy and access to information best practices throughout the organization.
You will develop and deliver privacy training programs and tools for Southlake PHIPA agents. Additionally, be knowledgeable regarding health privacy principles (PHIPA), access to information legislation, FIPPA (ideally) and/or the Municipal Freedom of Information and Protection of Privacy Act, expectations of the Information and Privacy Commissioner of Ontario (IPC) and act as an expert resource on privacy and freedom of information (FOI) matters. Establish, maintain and revise relevant Southlake privacy/FOI policies, practices and protocols in partnership with the manager/director and liaise with the IPC.
As a key member of the Quality, Risk, Patient Experience and Privacy portfolio, the Specialist will assist in ensuring organizational compliance with privacy legislation.
What you'll be doing:
The Specialist is an important member of this team and the organization and will promote and pursue the adoption of relevant best practices and standards and provide formal and informal analyses to a variety of stakeholders. The Specialist will have a considerable degree of interaction with a variety of internal and external stakeholders, including project managers, vendors, consultants, government and regulatory bodies, expert peers in the healthcare field, clinicians, patients, and members of the public. Leadership and communication skills are critical in this role to build credibility and trust and to accomplish goals with the assistance of internal and external teams. Specifically, the specialist will be expected to:
• Assist in the implementation and improvement of a comprehensive privacy program in a complex healthcare environment, promoting awareness and understanding of privacy and FOI concepts across all hospital areas;
• Develops and oversees processes for addressing privacy complaints and inquiries, investigating breaches and recommending correct actions;
• Assist in the implementation of operational compliance programs (e.g. auditing and research-related matters), and monitoring activities;
• Develops and maintains a statistical framework for tracking all access and privacy requests and prepares annual privacy and freedom of information reports;
• Contributes to the development and administration of Southlake's privacy and FOI, policies and procedures;
• Develop and administer Southlake’s privacy and FOI policies, ensuring alignment with legislative changes and IPC guidance;
• Act as a subject matter expert on privacy and FOI matters for Southlake management, conducting privacy impact assessments as necessary;
• Process FOI and complex privacy access requests;
• Complete privacy-related deliverables for new projects, including but not limited to privacy impact assessments (“PIAs”) and PIA summaries, development of risk mitigation strategies in relation to privacy matters, and construction of supportive policies and procedures;
• Ensures that Southlake is compliant with all relevant privacy and FOI legislation.
What you bring:
University degree in a related field (e.g. health sciences, information management, business, library sciences, public or health administration) or equivalent education and experience.
• Strong interest in privacy and access policies, with awareness of current trends and legislative reforms
• Canadian certification with the International Association of Privacy Professionals (CIPP/C) or an equivalent credential is an asset.
• At least three (3) years’ work experience with interpreting and applying provincial and federal privacy and freedom of information legislation, including Personal Health Information Protection Act (“PHIPA”) and Freedom of Information and Protection of Privacy Act (“FIPPA”), in a hospital or health care setting.
• Experience with privacy/FOI responsibilities, including interpreting legislation and implementing related programs in a healthcare setting
• Experience in driving and executing compliance and ethics programs (as it relates to privacy and FOI) and are knowledgeable in process management, analysis, operational improvement, and risk management. Knowledge of (or willingness to learn) risk management theory, process, and tools in a healthcare environment is an asset.
• Has initiative and can effectively manage multiple tasks/assignments with continuously changing priorities.
• Excellent written and verbal communication skills.
• Effective at building relationships and gaining credibility with various stakeholder groups.
• Detail-oriented and with excellent analytical, evaluation, and critical thinking skills to investigate requests, complaints, and issues and to provide expertise and recommendations.
Southlake Health is fully committed to a culture of belonging and an inclusive environment that encourages every team member to lead within their role, generate innovative ideas that reinforce our mission and goal to create a healthy workplace where our community can thrive.
Regular and reliable attendance is an expected requirement of this position.
We are committed to a selection process and work environment that is inclusive and barrier-free. Accommodation will be provided in accordance with the Ontario Human Rights Code. Applicants who may require accommodation during the selection process are encouraged to notify the Human Resources Department when contacted for an interview. The People, Culture and Experience team will work together with the hiring committee to arrange reasonable and appropriate accommodation for the selection process, which will enable you to be assessed fairly and equitably.
Health & Safety Workplace Responsibilities
It is the responsibility of all Southlake Health employees to work safely and promote health and safety in the workplace. Employees must adhere to the duties of workers, as stipulated in Section 28 of the OH&S Act, as well as all Southlake OH&S policies and procedures. Must be able to perform all necessary bona fide duties for the position, as outlined in the position guide. Must review and be capable of performing duties as outlined in the Job Demands Analysis for the position as a condition of offer. Proven ability to attend work regularly as per the Attendance Support Policy.
Commitment to Diversity and Inclusion
Southlake Health is fully dedicated to employment equity, diversity, and inclusion in our recruitment practices. We welcome candidates who identify with equity-seeking groups, including women, racialized individuals, Indigenous Peoples, persons with disabilities, and those from the 2SLGBTQ+ community. Any information provided will be kept confidential and used appropriately in our recruitment process.
Anti-Oppression/Anti-Racism at Southlake Health
Southlake Health is committed to having a workforce that is reflective of the diversity of York Region and strongly encourages applications from all qualified individuals, and from those who can provide different perspectives and contribute to a further diversification of ideas.
Accommodation & Diversity in the Workplace
At Southlake Health, we are committed to promoting employment equity, diversity, and inclusion in the workplace. Fostering equity, diversity, and inclusion in recruitment practices is a key aspect of our search process. The current posting is seeking candidates who identify with the following equity-seeking groups: women, racialized persons/persons of colour, Indigenous Peoples, persons with disabilities, and members of the 2SLGBTQ+ community. If you are of the aforementioned identities and feel comfortable making it known, you may choose to self-identify as a member of a designated group. Any information directly related to you is kept confidential and used safely to inform our recruitment process towards being an equal opportunity employer.
Only candidates selected for an interview will be contacted. Thank you for your submission. We appreciate your interest in joining Southlake Health!