Lead, Privacy

At Ontario Health, we are committed to developing a strong organizational culture that connects and inspires all team members across the province. Our vision is that together, we will be a leader in health and wellness for all. Our mission is to connect the health system to drive improved and equitable health outcomes, experiences and value. How we work together is reflected through our five values: integrity, inspiration, tenacity, humility and care.

What Ontario Health offers:
Achieving your career goals is a priority to us. Benefits of working at Ontario Health may include the following based on employment type:

- Fully paid medical, dental and vision coverage from your first day
- Health care spending account
- Premium defined benefit pension plan
- 3 personal days and 2 float days annually
- Individual contributors start at 3 weeks’ vacation with 4 weeks at 2 yrs.
- Career development opportunities
- A collaborative values-based team culture
- Wellness programs
- A hybrid working model
- Participation in Communities of Inclusion

Want to make a difference in your career? Consider this opportunity.

Here is what you will be doing:
Reporting to the Manager, Privacy, the Privacy Lead is responsible for the continued development, operation and execution of the privacy program for Ontario Health’s CorHealth business unit that ensures full harmonization and compliance with Ontario Health’s enterprise privacy program. The successful operation of the program will ensure the business unit meets all requirements to retain its existing designations under the _Personal Health Information Protection Act, 2004_ (PHIPA), and embeds privacy best practices and Privacy by Design principles into business unit operations. The Privacy Lead is responsible for the continued monitoring of the privacy program to ensure it meets evolving regulatory requirements, including requirements related to Ontario Health’s Prescribed Person and Prescribed Entity roles under PHIPA.

The Privacy Lead will use their privacy program and operational experience and knowledge of privacy, legal and regulatory requirements to develop and operate the privacy program. This role is expected to simultaneously support the CorHealth business unit in meeting their business needs and advance new initiatives by providing privacy advisory services and conducting complex privacy impact assessments (PIAs). The Privacy Lead will be the key point of privacy contact for all projects and programs within the business unit. This role will also review, update, and implement standard operating procedures (SOPs), practices, and other mechanisms to address identified risks, and advance privacy knowledge and understanding for all members of the business unit.

The Privacy Lead will work closely with the Manager, Privacy; Director, Privacy; and other Ontario Health leaders and contributors. The Privacy Lead is expected to build internal and external relationships and liaise extensively with members of the Privacy team and functional teams across OH, including the Information Security Office (ISO), Strategy, Planning, Privacy & Analytics teams, and Legal Services.

The Privacy Lead will play an important role in championing a culture of privacy at Ontario Health and enabling compliance with Ontario Health’s complex privacy requirements.

Here is what you will need to be successful:
As a Privacy Lead, you will have the opportunity to:

- Operate and support the continued development of a privacy program for Ontario Health’s business unit that:

- Is fully aligned and harmonized with the Ontario Health enterprise privacy program.
- Ensures compliance with complex legislative and contractual requirements/obligations.
- Embeds privacy best practice and Privacy by Design principles into business unit operations as well as new initiatives/projects.
- Includes an agreements framework that aligns with Ontario Health’ standardized contractual approaches.
- Supports the triennial Information and Privacy Commissioner of Ontario (IPC) reporting processes for prescribed designations under PHIPA.
- Tracks, monitors, and remediates identified risks.
- Identifies and addresses privacy education needs of the business unit.
- Includes up-to-date and relevant SOPs to support operational compliance.
- Monitor the effectiveness of the privacy program, identifying gaps and addressing newly identified areas of risk as required.
- Manage the continued operation of the privacy program, adjusting and expanding the program as required to accommodate business needs.
- Support new projects and initiatives for the business unit by providing expert privacy advisory services, conducting PIAs and leading risk mitigation efforts.
- Develop and implement strategies to effectively prioritize the management of competing areas of risk, while supporting business objectives.
- Perform incident management, investigation, containment, and remediation for the business unit.
- Liaise with Legal, Inf