Privacy and Information Access Officer

Position Type:
Permanent

Closing date:
2025-08-13

Medavie Health Services New Brunswick (MHSNB) is the subsidiary of Medavie Health Services responsible for the optimal operation and management of EM/ANB, an integrated organization specializing in the delivery of primary health care services with the goal of facilitating access to quality care so that patients can achieve better health outcomes. MHSNB is fortunate to be able to count on the expertise of its employees who work passionately to build a healthier province.

Our company is currently looking for new team members to support its mission of providing excellence in emergency and community care within our various programs, namely Ambulance New Brunswick, the Extra-Mural Program and NB Health Link. Each advocates for a highly coordinated, quality service offering guided by a goal of continuous improvement across primary health care.

Medavie Health Services is part of Medavie, a health services organization. Together with Medavie Blue Cross, we are committed to providing innovative solutions that will improve the health of all Canadians.

As a not-for-profit organization, Medavie is proud to commit an annual social dividend to the Medavie Health Foundation to support programs and initiatives aimed at addressing some of our country’s most pressing physical and mental health care challenges.

We are looking for a Privacy & Information Access Officer to help support our growing operation which provides exemplary, highly coordinated primary health care in the right place, from the right provider, at the right time.

The Privacy and Information Access Officer provides expert-level advice and support on privacy, confidentiality and information access matters for Medavie Health Service New Brunswick (MSHNB), Ambulance New Brunswick (ANB), the Extra-Mural Program (EMP) and New Brunswick Health Link Program and provides independent review of all aspects of the company’s compliance with Personal Health Information Privacy and Access Act (PHIPPAA) and Right to Information and Protection of Privacy Act (RHIPPA), as well as other privacy and information access laws and best practices. This position provides support and advice to the leadership team regarding planning, leading, and strategically managing a reliable and legally compliant privacy and information access program.

The position entails, but is not limited to the following;
- Conducts strategic analysis and provides expert advice and consultation to senior management on privacy and information access laws, regulations, standards and best practices;
- Performs review of relevant contracts/MOUs/Agreements/RFPs and other documents as required for inclusion of appropriate privacy, confidentiality/non-disclosure statements;
- Ensures that the privacy and information access policies, procedures and Standard Operational Procedures of the organization comply with applicable legislation, regulations and national standards by developing, implementing, monitoring and auditing frameworks to ensure organizational compliance to established privacy and information access policies;
- Identifies, develops, oversees and directs the delivery of privacy-related training, education and awareness activities;
- Develops and releases information notices and materials reflecting current organization and legal practices and requirements;
- Supports operations and other departments in the development, review and maintenance of privacy Preliminary Privacy Impact Assessments (PPIA), Privacy Impact Assessments (PIA) and Threat Risk Assessments;
- Performs ongoing monitoring and audit activities and reports on compliance with privacy policies and procedures, and the prevalence and types of privacy incidents and breaches;
- Responds to inquiries from staff for clarification on issues relating to privacy and access and works with managers as appropriate to mitigate privacy risks;
- Establishes and administers a process for receiving, documenting, tracking, investigating and taking action on all complaints concerning the company’s privacy policies and all information access and correction requests;
- Works collaboratively with the office of the Ombud and Privacy Officers from other relevant organizations.
- Under graduate degree in a related field such as health, social sciences, business or public administration, or a combination of education and related experience.
- Experience managing confidential, private and patient information.
- Understanding of investigative processes and demonstrated experience in executing quality activities and investigations.
- 5 years of progressively responsible experience including managerial responsibilities with a minimum of 2 years working in the field of privacy, quality and risk management or in policy development.
- IAPP, CIAPP or equivalent designation, or willingness to obtain designation within a specified timeframe.
- Knowledge of applicable federal and provincial laws and regulations relating