Information & Privacy Officer- Information & Privacy Office, IMG

Job summary

The Information and Privacy Officer manages the privacy program, including policy development, compliance oversight, and conducting privacy impact assessments. They are responsible for investigating privacy breaches, auditing data handling practices, and providing education to staff on privacy regulations.

Job details

The Information and Privacy Officer at CAMH is responsible for managing all aspects of the privacy program, including program implementation and monitoring, policy development, stakeholder relations, investigations, auditing, and education initiatives. Reporting to the Director, Clinical Informatics and Health Information Services, the Information and Privacy Officer ensures the confidentiality, integrity, and security of sensitive patient information, oversees compliance with privacy regulations, develops information governance policies, and educates staff on privacy best practices. Responsibilities & Activities: 1. Privacy Policy Development (20%): * Develop and update policies, procedures, and training materials relating to privacy compliance with PHIPA and FIPPA. * Develop strategies to ensure regulatory compliance. * Ensure policies reflect the unique considerations of mental health patient information. 2. Compliance Oversight (20%): * Process access requests under FIPPA. * Process and manage patient correction requests under PHIPA. * Participate in and implement provincial initiatives. * Monitor and ensure compliance with privacy laws. * Create quarterly/annual reports as required. * Conduct regular audits to assess adherence to privacy policies and regulations. 3. Data Management (15%): * Advise on hospital practices for access to and management of personal health information and personal information to ensure regulatory, policy, and contractual compliance. * Maintain the hospital Index of Personal Information Banks. 4. Incident Response and Reporting (15%): * Investigate privacy breaches and complaints promptly. * Report and document incidents in accordance with legal requirements. 5. Privacy Impact Assessments (PIAs) (10%): * Conduct PIAs or privacy reviews for new or changing systems, processes, or initiatives involving personal health information and personal information. * Consult with program stakeholders on recommendations to mitigate privacy risks and ensure compliance with regulations. 6. Training and Education (10%): * Keep up to date on emerging trends and practices related to information and privacy. * Represent CAMH with external partners. * Provide ongoing training to staff on privacy laws, policies, and best practices. * Foster a culture of privacy awareness within the hospital. * Support a healthy workplace that embraces diversity, encourages teamwork, and complies with all applicable regulatory and legislative requirements. 7. Privacy Audits and Consultations (10%): * Conduct regular privacy audits to assess data access and handling practices. * Identify areas for improvement and implement corrective actions. * Provide guidance and consultation to staff on privacy matters. * Address inquiries related to personal health information and personal information handling practices. Education & Specific Training: * Bachelor's degree or equivalent related experience. Credentials: * Designation as a Certified Information Privacy Professional/Canada (CIPP/C) considered a strong asset. Experience: * Minimum of three (3) years related work experience (experience may include front office support in a clinical program, privacy consultancy, health records, release of information experience, entry-level work in a privacy and access management office). * Previous experience in the healthcare industry, management level accountabilities. * Strong working knowledge of the Personal Health Information Protection Act (PHIPA) and either the Freedom of Information and Protection of Privacy Act (FIPPA) or the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA). * Strong analytical and problem-solving abilities, organizational and time management skills, as well as sound judgment. * Leadership experience in driving and executing compliance programs and knowledgeable in process management, analysis, operational improvement, and risk management. * Enthusiastic, flexible, and capable of working independently and in a team setting, demonstrating excellent interpersonal, organizational, and communication skills (both written and oral). * Ability to handle matters of a confidential and/or sensitive nature and work well under pressure and timelines. * Ability to work effectively in a wide range of settings with individuals from diverse backgrounds. * Proficient in Microsoft Office including Word, Excel, and PowerPoint. * Bilingualism (French/English) and/or proficiency in a second language is an asset. Compensation & Benefits: * Salary is competitive and based on experience, with a hiring range of $91,758.17 – $114,697.71 per year. * Employees in this role may progress within the full pay range of $91,758.17 – $137,637.25 per year * CAMH’s Total Rewards: Includes participation in HOOPP defined benefit pension plan, extended health and dental benefits, paid vacation starting at 4 weeks, flexible work arrangements, and ongoing professional development support. This role allows professionals to apply their expertise in a mission-driven environment dedicated to public health outcomes. If you are interested in this position, please ensure that you apply before 5pm EST of the closing date. If your application is received past 5pm EST of the closing date, your application will not be accepted. CAMH is a fully affiliated teaching hospital and research institute of the University of Toronto. As a CAMH employee, you will contribute to our mission by supporting teaching, research, and clinical care across the hospital. CAMH is dedicated to equity, diversity, and inclusion. Our commitment is to foster a workplace, teaching, and learning environment that is inclusive, respectful, and free from discrimination or harassment. CAMH strongly encourages applications from candidates who reflect the diversity of the communities we serve, including First Nations, Métis, and Inuit Peoples; Black and other racialized communities; LGBTQ2S+ communities; women; and people with disabilities, including those with lived experience of mental health and substance use challenges. We welcome applicants from all backgrounds. Thank you to all who apply; however, only those selected for an interview will be contacted. If you require accommodations during the application or recruitment process, please let us know. Through its core values of Courage, Respect and Excellence, CAMH is implementing its Strategic Plan: Connected CAMH, to transform lives, ignite innovation and discovery, revolutionize education and drive social change. CAMH is more than a hospital, it is a cause. CAMH is on a mission to change the way society thinks about and responds to mental illness. They aim to eliminate prejudice and discrimination and shape a world where mental illness is central to our healthcare system – a world where Mental Health is Health. To learn more about CAMH, please visit their website at: www.camh.ca. To view our Land Acknowledgment, please click here.

What you’ll do

The Information and Privacy Officer manages the privacy program, including policy development, compliance oversight, and conducting privacy impact assessments. They are responsible for investigating privacy breaches, auditing data handling practices, and providing education to staff on privacy regulations.

Requirements

Candidates must possess a bachelor's degree and a minimum of three years of related work experience in privacy, health records, or clinical support. Strong knowledge of PHIPA and FIPPA/MFIPPA is required, with a CIPP/C designation considered a strong asset.

Benefits

• Defined benefit pension plan • Extended health benefits • Dental benefits • Paid vacation • Flexible work arrangements • Professional development support

Listed skills

• Problem solving · Preferred
• Policy development · Preferred
• Regulatory Compliance · Preferred
• Risk Management · Preferred
• Microsoft Office · Preferred
• Communication Skills · Preferred
• data management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Privacy compliance
• Policy development
• Regulatory compliance
• Data management
• Incident response
• Privacy impact assessments
• Auditing
• Stakeholder relations
• Clinical informatics
• Risk management
• Process management
• Analytical skills
• Problem-solving
• Communication skills
• Microsoft Office
• Program Implementation
• Clinical Informatics
• Courage
• Healthcare Industry Knowledge
• Stakeholder Communications
• Privacy Impact Assessments
• Policy Development
• Certified Information Privacy Professional
• Bilingual (French/English)
• Data Access
• Microsoft Excel
• Research
• Annual Reports
• Teaching
• Mental Health
• Management
• Strategic Planning
• Certified Associate In Materials Handling
• Medical Records
• Communication
• Regulatory Compliance
• Confidentiality
• Data Management
• Disabilities
• Incident Response
• Front Office
• Leadership
• Innovation
• Information Governance
• Information Processing
• Problem Solving
• Risk Management
• Mental Diseases
• Personal Health Records
• Microsoft PowerPoint

Job areas

• Healthcare
• Legal
• Management & Leadership
• Data & Analytics
• Government & Public Sector
• Privacy Officer
• Compliance Officer / Analyst
• Legal and Related Associate Professionals
• Compliance Officers