OVERVIEW

The Privacy and Compliance Coordinator plays a crucial role in supporting The Michael Garron Hospital/Toronto East Health Network Privacy and Compliance programs. This position is responsible for fostering a culture of compliance and privacy and, providing expert advice on privacy matters, and addressing privacy-related issues. The Privacy and Compliance Coordinator promotes a culture of compliance and privacy within the organization, advises on and resolves privacy issues, responds to privacy-related inquiries, conducts privacy risk assessments, and performs audits, investigations, and incident response activities.

This is an exciting opportunity to support and enhance the privacy program at the hospital as it continues to build upon its reputation for privacy excellence in an increasingly electronic environment. You will join a team that supports awareness of, and adherence to, privacy and other regulatory standards, policies and best practices. This position reports to the Information, Privacy and Compliance Officer and is part of the Quality, Patient Safety, Risk, Privacy and Operational Excellence department.

KEY RESPONSIBILITIES

• Providing privacy advisory, risk assessment and mitigation services to staff through interpretation of applicable policies, requirements and legislation.
• Support expansion of Compliance Program
• Collaborating on the privacy audit program and performing regular privacy audits
• Investigating privacy incidents and complaints, coordinating the incident response plan, and recommending corrective action to avoid repeated incidents.
• Collaborating on plans for privacy training, education, awareness and communications
• Reviewing electronic and other information management systems and tools to ensure compliance with organizational policies, privacy legislation and data security standards
• Reviewing data sharing agreements in collaboration with Research, Legal, etc.
• Monitoring privacy trends in the internal and external environment
• Supporting the Privacy Officer in updating privacy related policies
• Engagement with the Hospital’s Cyber, Artificial Intelligence and Privacy Committee.
• Support the East Toronto Health Partners (OHT) Privacy Working Group
• Support on going privacy education program
• Other activities, as assigned by the Information, Privacy and Compliance Officer

EDUCATION

• Master's degree program in Business Administration, or Health Industry Administration, or recognized equivalent is preferred.

• Undergraduate degree in information management, records management, public and/or health policy administration, or related discipline OR equivalent educational or practical experience.

• Working or applied knowledge of Ontario privacy legislation (e.g., PHIPA and FIPPA).

QUALIFICATIONS

• A minimum of two (2) years’ experience in a privacy related role in healthcare preferred.
• Providing privacy advisory, risk assessment and mitigation services to staff through interpretation of applicable policies, requirements and legislation.
• Support expansion of Compliance Program
• Collaborating on the privacy audit program and performing regular privacy audits
• Investigating privacy incidents and complaints, coordinating the incident response plan, and recommending corrective action to avoid repeated incidents.
• Collaborating on plans for privacy training, education, awareness and communications
• Reviewing electronic and other information management systems and tools to ensure compliance with organizational policies, privacy legislation and data security standards
• Reviewing data sharing agreements in collaboration with Research, Legal, etc.
• Monitoring privacy trends in the internal and external environment
• Supporting the Privacy Officer in updating privacy related policies
• Engagement with the Hospital’s Cyber, Artificial Intelligence and Privacy Committee.
• Support the East Toronto Health Partners (OHT) Privacy Working Group
• Support on going privacy education program
• Other activities, as assigned by the Information, Privacy and Compliance Officer
• Supporting the development and implementation of privacy policies
• Assist with documentation and reporting required for regulatory or legal purposes
• Well-developed analytical, problem-solving and organization skills.
• Strong written and oral communication skills. Ability to translate complex privacy and regulatory standards into material that can be understood by diverse audiences.
• Experience using Microsoft Office products such as Outlook, Word, Excel and PowerPoint.
• Proficiency in the use and maintenance of computer database systems and data analysis.
• A keen interest in working with people at all levels and in all areas across the organization.
• Confidence, flexibility, diplomacy and solid interpersonal skills, including the ability to influence a wide variety of stakeholders.
• Eagerness to learn.
• Strong ability to maintain confidentiality; possesses diplomacy and tact.
• Strong IT knowledge and understanding as it relates to privacy.
• Understand importance and demonstrates ability to foster a culture of Equity, Diversity, and Inclusion.
• IAPP privacy certification (or equivalent) and/or other advanced privacy training is also an asset.
• Project Management experience in a related institution or health care organization in information privacy and security policy development, education, complaints investigation, information privacy.
• The use of privacy and security assessment tools such as privacy impact assessments, threat and risk assessments and corporate information security reviews would be an asset.
• Demonstrated experience is creating, delivering and evaluating educational programs.
• Good work and attendance record required.
• All employees of Michael Garron Hospital (MGH), a division of Toronto East Health Network (TEHN) [formerly Toronto EastGeneral Hospital (TEGH)] agree to work within the legislated practices of the Occupational Health and Safety Act of Ontario.
• All employees of MGH are responsible to contribute to a transparent culture of patient and staff safety by adhering to and abiding by patientand staff safety policies and procedures set by MGH.
• All employees are accountable for protecting the psychological health and safety of themselves and their co-workers through adherence to MGH's policies and practices.