Health Infomation Privacy Specialist

ABOUT US

Almost 1.2 million residents call York Region home, making it one of the largest regions in Canada – and the fastest growing with a population that's expected to grow to more than 2 million by 2041. Our geography, which is comprised of about 1,800 square kilometers over nine different municipalities, is as beautiful, interesting and diverse as our people. Local government is organized in a two-tier structure and we work together with our local municipalities to provide residents and businesses access to a broad selection of services and resources.

WHAT WE OFFER

Consistently named one of Canada's Best Employers by Forbes, we offer a collaborative, progressive workplace that takes pride in our organizational culture and is committed to living The 13+ Factors of Psychological Health and Safety in the Workplace – aligned with our vision to create strong, caring and safe communities both within and outside our walls.

• Defined Benefit Pension Program

• With the Ontario Municipality Employees Retirement System (OMERS) defined benefit pension plan, you can confidently retire knowing that you will have income for life. Eligibility from date of hire as a full-time employee and includes employer-matched contributions.

• Employer of Choice

• Recognized as the highest-ranking government employer in Canada and fourth overall among 300 organizations.

• Benefits and Wellness

• Employees and their loved ones have access to an employee health care spending account, access to a 24/7 Employee and Family Assistance Program and corporate discounts and purchase plans for day-to-day products and services. Casual employees are eligible to receive payment in lieu of benefits and/or vacation.

• Inclusive and Diverse Workforce

• We're committed to fostering an environment that celebrates all dimensions of diversity and ensures everyone can develop to their full potential, participate freely in society and live with respect, dignity and freedom from discrimination. Our robust Inclusion, Diversity, Equity and Accessibility program continues to grow, and has been recognized by the United Nations and many other organizations for our leadership.

ABOUT THE ROLE

This position is responsible for supporting and facilitating activities related to the development, implementation, maintenance of and adherence to the Personal Health Information Protection Act (PHIPA) processes, ensuring compliance with information legislation and the Region's related policies and procedures. This position coordinates matters relating to PHIPA including preparing responses to access requests made under PHIPA, conducts the investigations of potential privacy breaches or misconduct; presents recommendations and best practices following their privacy investigations; provides subject matter expertise to client groups, conducts regular audits of electronic health records and systems and creates related reports, and advises and trains Departmental staff on access and privacy matters.

WHAT YOU WILL BE DOING

•    Analyzes and prepares responses to applications made under PHIPA and related legislation.

•    Recommends modifications to PHIPA access requests or the routine disclosure of information. 

•    Researches, recommends and supports the implementation of policy, guidelines, forms and procedures for the collection of personal health information, it's use within Community and Health Services programs and applications, disclosure to the public, and the processing of access applications; identifies applicable statutory exemptions and exceptions pertaining to access applications.

•    In consultation with management, prepares representations and submissions in response to mediations or appeals under the Act.

•    Liaises with Branch representatives and coordinates all activities to respond to access requests, provides guidelines, deadlines and advice to branch staff.

•    Handles and conducts confidential privacy breach investigations, makes findings and recommendations, prepares investigation reports and leads the response to reported privacy breaches, cyber breaches, identifies appropriate mitigating strategies, makes recommendations, and escalates to management where appropriate.

•    Ensures compliance with privacy related policies and the Region's Code of Conduct in relation to privacy breaches and/or misconduct.

•    Provides access and privacy guidance, develops and delivers comprehensive training for client groups, and conducts activities to create privacy awareness within the Department.

•    Consults with the Program Manager and the Regional Clerk's Office on joint Municipal Freedom of Information and Protection of Privacy Act (MFIPPA) and PHIPA requests and to ensure conformity of PHIPA processes with Regional access and privacy policies and procedures, where applicable.

WHAT YOU WILL BE DOING

•    Successful completion of a Community College Diploma in Business, Commerce, Public Administration or related field or equivalent approved combination of education and experience.

•    Minimum three (3) years of related work experience, preferably in a public sector or healthcare organization.

•    Satisfactory Criminal Records Check.

•    Demonstrated knowledge and experience applying the Personal Health Information Protection Act (PHIPA) and/or the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA).

•    Proven experience of leading or participating in Privacy Impact Assessments or similar processes.

•    Knowledge of developing and implementing privacy policies and procedures.

•    Experience managing privacy incidents and breach responses.

•    Demonstrated ability in the Region's core competencies.

•    Intermediate skills in virtual platforms and MS Office Suite.