Privacy Specialist

Posting #:
**23445**
- Openings Remaining:
**1**
- Full/Part Time:
**Full Time**
- Reg/Temp/Casual:
**Regular**
- Union:
**Non-Union**
- Hours of Work:
**Monday to Friday; Days**
- Time of Day:
**Days**
- Shift Length:
- Open Date:
**22/12/22**
- Closing Date:
**29/12/22**

***:
The SJHH Privacy Office is committed to protecting the privacy of patients’ personal health information and promoting a culture of privacy. The Privacy Specialist is responsible for ensuring hospital-wide compliance with relevant privacy legislation, specifically the Ontario Personal Health Information Protection Act, advising on and resolving privacy issues, conducting privacy risk assessments, managing privacy-related inquiries, investigations and incident response. The Privacy Specialist will promote enterprise privacy standards and support adherence to the hospital Privacy Compliance Framework through maintaining an enterprise privacy training program, conducting audits of systems of personal health information, and providing guidance based on Ontario privacy law, industry best practices and policy.

**QUALIFICATIONS**:

- Two or three year Community College diploma in a related field is required; OR Undergraduate degree or equivalent in Public / Health Administration, Information Management, or related discipline.preferred
- IAPP Certification (CIPP/C) preferred
- CHIMA training or IAPP training and/or certification, FOI and/or PHIPA training, demonstrated experience in HIM or health information access/ROI, or some combination preferred.
- A minimum of 1-2 years experience in a privacy-related role (healthcare industry preferred)
- Practical working knowledge of privacy legislation, trends and issues, with an ability to translate that knowledge to a healthcare setting required
- Demonstrated ability to build strong relationships and to work collaboratively with individuals and teams required
- Believes in continuous improvement and driven to improve processes, systems and practices as appropriate
- Strong written and oral communication skills. Ability to translate compliance and regulatory standards into material that can be understood by diverse audiences.
- Experience using Microsoft Office products such as Word, Excel, and PowerPoint required
- Strong IT knowledge and understanding as it relates to privacy compliance
- Good understanding of related disciplines, such as policy development, compliance frameworks, freedom of information, risk management
- Ability to analyze and interpret legislation

**RESPONSIBILITIES**:

- Works with key internal stakeholders in the review of hospital projects, partnerships, IT systems, cloud environments and data initiatives to ensure compliance with privacy requirements.
- Conducts internal privacy impact assessments.
- Reviews data sharing provisions in collaboration with Legal, Information Security, Procurement and Digital Solutions.
- Investigates privacy incidents and complaints, leads the incident response plan, and recommends corrective action to avoid recurring incidents
- Carries out required notifications following a privacy breach, collaborating with Legal, Human Resources, Patient Relations and other internal stakeholders
- Develops and delivers staff training and education
- Prepare privacy communications and maintains the Department intranet site.
- Monitors privacy and compliance trends in the internal and external environment
- Develops and maintains enterprise privacy documents (policies, guidelines and procedures), using best practices in privacy governance and management
- Promotes privacy practices to internal and external stakeholders.
- Establishes relationships and collaborates with departments internally at SJHH.
- Collaborates with local SJHS and Hamilton partners, and participates in local, regional and provincial privacy hospital working groups.
- Reports and corresponds with the Information & Privacy Commissioner of Ontario (IPC) and relevant ministries, as directed by the Chief Risk, Legal & Privacy Officer
- Supports the Chief, Risk, Legal & Privacy Officer in the preparation and submission of regulatory reports.
- Other activities, as assigned by the Chief, Risk, Legal & Privacy Officer.

**HOURS OF WORK**:
Monday-Friday, days

**PLEASE NOTE**:
Vaccines (COVID-19 and others) are a requirement of the job unless you have an exemption on a medical ground pursuant to the Ontario Human Rights Code.

**_ St. Joe’s fosters an environment where we celebrate diversity, where teams reflect the diversity of the community in which we serve, enhancing the connection to patients, clients, community, and each other._