Privacy Impact Assessment Specialist 9522-1809

**Description**:

- Assess existing legislation and regulations for potential changes required to support additional initiatives to provide greater access to PHI and digital health care services and determine impacts on existing data sharing/EHR agreements/privacy frameworks/health information custodian (HIC) models.
- Develop and provide change management support and/or communications to support stakeholders with changes related to privacy business processes.
- Review the recommendations from the privacy impact assessment (PIA) of the proposed solution and business processes.
- Provide advice to the ministry as it relates to privacy legislation, regulations, policy and guidelines.
- Coordinate across branches and develop communication materials such as briefing notes and presentations.
- Consult and gather input from specific individuals within the organization on privacy topics either independently or as part of a team.
- Communicate with technical and business audiences and non-privacy experts.
- Prepare and present status reports and updates for any relevant steering committees, advisory panels, working groups, or similar governance bodies.
- Ensure project artefacts and deliverables reflect a superior understanding of:

- The necessary legislation and regulations to enable access to PHI and digital health care services in the Ontario context;
- The current landscape of digital health tools used to support patient access to PHI, including patient portals, apps, etc., and the opportunities to transform care and improve services to support a unified patient experience in digital health;
- Strong knowledge of identity verification, authentication, and authorization services and the privacy and policy requirements to enable the usage of these services;
- Strong knowledge of digital health systems and programs, including Health811, secure log-in mechanisms, patient portals, and the provincial EHR;
- All relevant digital health/information technology issues, including policy, clinical / business and technical (e.g., interoperability, standards, licensing, operations and sustainment, etc.) requirements; and
- Private and public sector delivery partner capacity to deliver technology in a clinical setting; and
- Best practices in information technology project management.

**Skills**:
Experience and Skill Set Requirements

**'‹**

**Health sector and digital health experience**:'‹20 points**
- '‹'‹Strong understanding of the healthcare system, structures, processes, stakeholder groups and affected populations, and how healthcare services are delivered in the province based on extensive experience with Ontario's health sector;
- Strong track record of experience with the ministry and its delivery partners, and in-depth knowledge of the levers and instruments of change;
- Strong knowledge of and experience with the digital health systems, programs, vendors, assets and solutions in Ontario.

**'‹Health privacy knowledge and regulatory experience**:'‹40 points**
- '‹Strong understanding of Ontario's privacy regulations/policies/frameworks, and how they are applied to individuals and organizations in the use and protection of personal health information;
- Demonstrated experience with conducting or leading privacy impact assessment in the health context;

**'‹Program and project management**:'‹10 points**
- Experience managing complex projects with a demonstrated track record of successful delivery within approved plan, scope and budget and business outcomes; and
- Demonstrated leadership and resource management skills including the ability to direct activities and manage a variety of professionals.

'‹

**'‹IT strategy and planning**:'‹10 points**
- Track record of successful strategic planning in health technology contexts;
- '‹Demonstrated ability to define objectives, develop strategic options analysis and to create action plans that outline tasks required for implementation phase; and
- Ability to provide clarity and collective understanding of the range of options and communicate logically how the options were developed and selected as the strategic response.

**'‹Business analysis**:'‹20 points**
- '‹Demonstrated experience managing business projects and achieving successful results on time and on budget with high customer satisfaction;
- '‹Demonstrated experience in process mapping, requirements gathering, program definition, and transition planning; and
- Demonstrated experience in leading program or organizational transformation initiatives.

**Must Haves**:

- Strong understanding of Ontario's privacy regulations/policies/frameworks, and how they are applied to individuals and organizations in the use and protection of personal health information;
- '‹Demonstrated experience with conducting or leading privacy impact assessment in the health context;
- Strong knowledge of and experience with the digital health systems, programs, vendors, assets and solutions in Ontario.