Information Privacy Coordinator

External Jobs – Information Privacy Coordinator

About the CFPC The College of Family Physicians of Canada (CFPC) is the professional organization that represents more than 45,000 members across the country. The College establishes the standards for and accredits postgraduate family medicine training in Canada’s 17 medical schools. It reviews and certifies continuing professional development programs and materials that enable family physicians to meet certification and licensing requirements.

The CFPC provides high-quality services, supports family medicine teaching and research, and advocates on behalf of the specialty of family medicine, family physicians, and the patients they serve.

Our Vision : Leading family medicine. Improving lives.Our Mission : Leading family medicine to improve the health of all people in Canada—by setting standards for education, certifying, and supporting family physicians, championing advocacy and research, and honouring the patient-physician relationship as being core to our profession.Our Values : Caring; Learning; Collaboration; Responsiveness; Respect; Integrity; and Commitment to Excellence.Our Goals: 1. Advancing Family Medicine 2. One Unified Voice 3. Transforming the CFPC

Position Title: Information Privacy Coordinator
Vacancy#:
Department: Legal Services
Division: Corporate Services
Reports to: Manager, Information Privacy
Direct Reports: No
Classification: Individual Contributor
Status: Permanent Full Time
Full Time Equivalent: 1.0
Bilingual (English/French): Yes/No
Salary: $78,506.64 – $98,133.36

Summary The Information Privacy Coordinator supports the delivery and operationalization of the organization’s records management and privacy framework. Reporting to the Manager, Information Privacy, the role focuses on auditing and documenting information holdings, implementing records lifecycle controls, and supporting privacy risk management activities. This position leads the assessment, organization, and lifecycle management of legacy and current records across physical and digital environments, embedding privacy-by-design principles into information practices. Working collaboratively across departments, the Information Privacy Coordinator supports compliance with Canadian privacy legislation, including Personal Information Protection and Electronic Documents Act (PIPEDA) and Québec’s Law 25, while enhancing operational efficiency, transparency, and risk reduction.

Main Responsibilities include but are not limited to:

• Essential Duties

Records Management Program Development: Establish and operationalize a formal enterprise records management program to ensure compliant, defensible, and consistent information practices across the College of Family Physicians of Canada (CFPC):

– Conduct organization-wide audits and assessments of physical and electronic records holdings to identify risks, gaps, redundancies, and non-standard practices

– Contribute to the development, documentation, and implementation of records management policies, standards, classification schemes, and governance frameworks

– Assist with the development, communication, and implementation of corporate-wide records retention schedules aligned with legal, regulatory, and operational requirements

– Define and promote best practices for records creation, organization, access, retention, archival, and secure destruction

– Provide functional advice and guidance to business units on records ownership, accountability, and stewardship responsibilities

– Validate records management practices through monitoring, review, and continuous improvement activities

Records Lifecycle & Legacy Data Management: Manage and support the lifecycle of records across physical and digital environments to reduce risk and improve accessibility and defensibility:

– Manage records lifecycle activities across SharePoint, Microsoft 365, OpenText, physical archives, and third‑party applications

– Coordinate legacy data clean‑up, remediation, migration, and defensible disposition initiatives in collaboration with system owners and stakeholders

– Identify obsolete, redundant