Position Summary Reporting to the Director of Digital Innovation and Health Information Management the Privacy Analyst supports the organization’s compliance with privacy legislation and internal policies by managing day-to-day privacy operations. This includes responding to and tracking privacy breaches, processing Freedom of Information requests, assisting with Privacy Impact Assessments, supporting privacy education initiatives, and maintaining privacy-related policies and procedures.

Required

• A diploma or degree in Health Information Management, Library Science, Archival Studies or a Health Science related discipline is preferred, or a combination of education, training and moderate experience in information management and access and privacy legislation
• Knowledge and understanding of the Freedom of Information and Protection of Privacy Act (FIPPA), the Personal Health Information Protection Act (PHIPA), other applicable legislation and the directives, guidelines, decisions and orders of the Office of the Information and Privacy Commissioner (IPC)
• Knowledge of privacy programs and operational activities, including privacy breach management, staff training and awareness, auditing practices, and privacy risk assessment and mitigation.
• Ability to design, implement, or support compliance related processes and tools, such as forms, logs, workflows, and tracking mechanisms, including the development and use of metrics, dashboards, and reports to monitor compliance.
• Strong organizational and communication skills.
• Proficiency in Microsoft Office (Word, Excel, PowerPoint).
• Ability to handle sensitive information with discretion.
• Asset: Privacy certification (e.g., CIPP/C), experience in healthcare privacy, knowledge of clinical workflows, experience with hospital health information systems (Cerner, Meditech, Epic, Quadramed, or other)

Duties Privacy Breach Management

• Respond to and document privacy breaches, including investigation, containment, notification, and follow-up.
• Maintain breach logs and prepare reports for internal and external compliance requirements.
• Develop privacy audit plans and conduct privacy audits across QH portfolios on an ongoing basis and/or as scheduled by privacy policies and procedures,

Freedom of Information Requests (FIPPA)

• Process and track formal requests for access to information.
• Review records, redact sensitive information, and prepare responses in accordance with legislation.

Privacy Impact Assessments

• Assist in conducting PIAs for new systems or processes involving personal health information.
• Document findings and escalate risks as needed.

Education & Awareness

• Support the development and delivery of privacy training and awareness programs for staff.
• Track completion of mandatory privacy training.

Policy & Procedure Maintenance

• Assist in reviewing and updating privacy policies and procedures to ensure compliance with PHIPA and FIPPA.
• Maintain templates, forms, and logs related to privacy operations.
• Collaborate with members of the privacy team and other QH portfolios or functional teams (i.e. Information Security, Enterprise Risk Management, etc.) to ensure QH has integrated and harmonized information practices,
• Act as the subject matter expert as you coordinate and support the management, and execution of program and operational activities required to ensure QH’s compliance with IPC requirements, including but not limited to governance and accountability, privacy breach management, privacy risk management, and privacy training and awareness activities,

Reporting

• Prepare routine reports on privacy breaches, FOI requests, and training compliance for leadership and regulatory bodies.

At Quinte Health, our four hospitals unite under the core values of Imagine It’s You, Value Everyone, We All Make a Difference , and Stronger Together . We work as one team to enhance lives, improve access to high-quality care, and build healthier communities—right where people need it most.

Quinte Health’s four hospitals are the heart of our communities, delivering exceptional care close to home. As one unified team, we’re passionate about improving lives and expanding access to high-quality healthcare. Our staff, physicians, and volunteers don’t just work here—we live, grow, and thrive here. If you’re compassionate and driven, we have exciting opportunities across our hospitals. Join us and make a real impact!

Physical Demands Analysis Strength

• Required Rarely – lifting average 5-10 pounds’ maximum 15 pounds, carrying, pushing/pulling.

Mobility

• Required Often – prolonged sitting, and
• Required Occasionally – standing and walking on hard surfaces, bending/stooping.

Dexterity

• Required Often – prolonged fine finger movements,
• Required Frequently – gripping/grasping, eye/hand coordination, and
• Required Briefly – reaching with both hands.

Equal Opportunity We thank all interested candidates for their response, however, only those chosen for an interview will be contacted. Quinte Health is an equal opportunity employer committed to meeting needs under the Canadian Charter of Rights and Freedom and the Ontario Human Rights Code. Our Recruitment process follows the Accessibility for Ontarians with Disabilities Act in order to provide a fair and equitable process for all candidates. Applicants requiring accommodation through the recruitment/interview process are encouraged to contact the Human Resources Department at 613-969-7400 x2577 or