Privacy Leader

Job Summary

At Home and Community Care Support Services, we are seeking an experienced Privacy Leader to play a pivotal role in ensuring the confidentiality, integrity, and accessibility of patient health information or records across the province.

The Privacy Leader will support the organizational transformation of 14 HCCSS organizations to Ontario Health atHome, specifically in ensuring standardization, efficiency, and implementation of best practices across the privacy portfolio in the development of a shared services organizational structure.

This role is responsible for aligning practices with regulatory frameworks and legislation, including but not limited to Personal Health Information Protection Act (PHIPA) and the Substitute Decision Act.

The Privacy Leader will oversee the management of personal health information (PHI) in records, as well as the day-to-day operations of access requests and releases, corrections of the PHI in records, and protection of PHI in accordance with legal requirements and organizational policies.

Key Responsibilities

• Lead the management of the release of personal health information to authorized parties in compliance with PHIPA regulations and organizational policies.
• Oversee the review and processing of release of information requests, ensuring that patient privacy and confidentiality are maintained at all times.
• Manage complaints related to releases or corrections as the first point of contact, conduct initial investigations, and implementing corrective actions as necessary.
• Manage and supervise processes for identifying and correcting errors in patient records through quality audits as needed, for accuracy and completeness obligations.
• Direct investigations into root cause of errors in personal health information and implement processes for corrective actions, changes in process, or submission of change to client systems as applicable.
• Collaborate with risk, legal, and patient services teams to address complex release requests and potential breaches of privacy.
• Responsible for the practices and procedures for correction of personal health information, including approving denials of correction, meeting legislated timelines and content requirements in response to corrections, and applying statements of disagreement in compliance with PHIPA.
• Develop, implement, and ensure the management and maintenance of client health information in a manner that meets legislative and regulatory requirements across Ontario Health atHome.
• Work closely with external partners, including Legal, HIROC, IPC, coroners, and legal/court personnel, to navigate and meet legislative requirements and decisions made regarding access and corrections.
• Acts as a subject matter expert related to the Consent Act, role of the substitute decision maker, Coroners Act, POA rules, and relevant legal concepts.
• Manage and supervise processes of identifying and correcting errors in patient records through quality audits as needed, for accuracy and completeness obligations.

Requirements

• University Degree in Health Information Management, Health Administration, or a related field.
• Certification as CIPP/C or other equivalent accredited certification is an asset.
• Member in good standing with the Canadian College of Health Record Administrators at the Certificate level would be an asset.
• 5-7 years of experience in managing personal health information.
• Strong understanding and experience with privacy legislation implementation, including PHIPA 2004, Substitute Decision Act, Health Care Consent Act, Coroner's Act, Missing Person's Act, and other related acts or legislation.
• Experience with computerized record keeping/management.
• Proven leadership experience, with a track record of effectively managing teams and projects.
• Strong knowledge of electronic health record systems and related technologies, particularly CHRIS, Docushare, and Acutenet.
• Analytical mindset with the ability to work with data and generate meaningful reports.
• Familiarity with medical terminology and documentation standards.
• Strong computer skills with a working knowledge of PC software, including client databases, MS Office, MS Word, Excel, PowerPoint.
• Knowledge of legislative and professional standards with respect to consent, confidentiality, security, privacy, disclosure of client information, documentation standards, health records retention, and destruction.
• Understanding of client records storage and retrieve processes, including use of electronic media.
• Ability to handle sensitive information with a high degree of confidentiality and professionalism.
• Strong presentation skills to provide information to staff at all levels of the organization and external community organizations.
• Ability to influence others and navigate complex health records-related concerns.
• Ability to communicate complex privacy and health records legislation and concepts to a variety of audiences with varied knowledge of privacy principles.
• Strong ability to diffuse conflict in escalated and sensitive situations.
• Strong coaching and mentoring skills.
• Ability to develop and foster relationships and gain buy-in from a variety of internal and external stakeholders.
• Ability to manage multiple priorities where circumstances and information change frequently.

What We Offer

• Attractive comprehensive compensation packages and benefits.
• Valuable development opportunities.
• Membership in a world-class defined benefit pension plan.
• Hybrid work model (subject to change).
• Flexible work location (this position can be located at any of the Ontario Health atHome offices).