Information and Privacy Officer

Job Description

Through its core values of Courage, Respect and Excellence, CAMH is implementing its Strategic Plan: Connected CAMH, to transform lives, ignite innovation and discovery, revolutionize education and drive social change. CAMH is more than a hospital, it is a cause. CAMH is on a mission to change the way society thinks about and responds to mental illness. They aim to eliminate prejudice and discrimination and shape a world where mental illness is central to our healthcare system – a world where Mental Health is Health.

To learn more about CAMH, please visit their website at:

To view our Land Acknowledgment, please click here.

The newly established pan-Canadian Integrated Youth Services (IYS) Collaboration Centre has been created to support development, implementation and evaluation of IYS practices, services, and research across Canada. There are emerging or established IYS networks in every province and territory in Canada, which deliver mental health, substance use health, primary care, education, employment, housing and other health, social and community services to youth aged 12 to 25 years.

The Integrated Youth Services (IYS) Data Platform is a pan-Canadian initiative hosted by the Centre for Addiction and Mental Health (CAMH) to enable secure, ethical, and coordinated use of data to improve youth mental health and wellness. The platform connects participating IYS networks across the country through a modern cloud-based infrastructure that supports real-time data collection, integration, and analytics while protecting privacy and respecting Indigenous data sovereignty. Designed to empower youth, families, researchers, and service providers, the IYS Data Platform advances measurement-based care, quality improvement, and population-level insight to strengthen Canada's youth mental health ecosystem.

CAMH is currently seeking a full-time, contract (1 year) Information and Privacy Officer to support the establishment and implementation of the IYS Data Platform. Reporting to the Director of Clinical Informatics and Health Information Services, the Information and Privacy Officer will be responsible for managing all aspects of the IYS Data Platform and Collaboration Centre privacy program, including program implementation and monitoring, data sharing agreements, policy development, procedures, stakeholder relations, investigations and auditing, and education and awareness initiatives.

Your initial accountabilities will include supporting the establishment of the IYS Data Platform in compliance with relevant provincial and federal acts and regulations (e.g., Personal Health Information Protection Act (PHIPA)). You will also be responsible for developing compliance strategies, supporting data sharing and legal agreements, ensuring regulatory compliance, investigating privacy complaints and incidents, conducting audits, conducting privacy reviews / reviewing privacy impact assessments, and developing policies, procedures and training materials relating to privacy compliance. You will support a healthy workplace that embraces diversity, encourages teamwork and complies with all applicable regulatory and legislative requirements. This position is located at 1001 Queen Street West.

Job Requirements

The successful candidate will have, at minimum, a Bachelor's degree combined with a minimum of three (3) years of progressively responsible related work experience in a privacy practice and across multiple privacy laws, and minimum of one year experience in an Access and Privacy Office. Previous experience in the healthcare industry with management level accountabilities is an asset as well as designation as a Certified Information Privacy Professional/Canada (CIPP/C). You have a strong working knowledge of Personal Health Information Protection Act (PHIPA), Freedom of Information and Protection of Privacy Act (FIPPA) and related provincial and federal privacy frameworks, and an understanding of Ownership, Control, Access, and Possession (OCAP), Ethical Governance, Accountability, and Partnership (EGAP), and Indigenous data sovereignty principles. You demonstrate awareness of pan-Canadian interoperability and data-sharing frameworks and can apply these to ensure compliance and ethical alignment across diverse jurisdictions. You have experience aligning privacy and compliance functions within broader data governance ecosystems, collaborating effectively with Data Governance, Legal, Cybersecurity, and Research Ethics teams.

You possess strong analytical and problem-solving abilities, organizational and time management skills as well as sound judgement. You possess leadership experience in driving and executing compliance programs and are knowledgeable in process management, analysis, operational improvement and risk management. You are enthusiastic, flexible and capable of working independently and in a team setting and can demonstrate excellent interpersonal, organizational and communication skills (both written and oral). You can handle matters of a confidential and/or sensitive nature and can work well under pressure and timelines. You have the ability to work effectively in a wide range of settings with individuals from diverse backgrounds. You are proficient in Microsoft Office including Word, Excel, and PowerPoint. Bilingualism (French/English/an Indigenous language) and/or proficiency in a second language is an asset.