Data Privacy Strategist

Yoush Consulting Inc.; Toronto; On-site; CAD 90,000 - 130,000; Full time

Job summary

Yoush Consulting Inc. in Ontario is seeking a Data Privacy Strategist to interpret and apply PHIPA, FIPPA, and related data-sharing agreements to complex projects in the health sector.

You will assess policies, develop integrated project plans, and coordinate with clinical and IT teams to communicate privacy requirements to executives and frontline staff. This role demands strong understanding of Ontario's privacy laws, experience with privacy impact assessments, and the ability to translate

Qualifications

• Strong understanding of Ontario privacy regulations and how they apply to personal health information.
• Experience conducting privacy impact assessments in health contexts.
• Ability to interpret data-sharing agreements and health information network provisions.
• Excellent cross-functional communication with technical and non-technical stakeholders.
• Experience coordinating projects across branches and executives.

Responsibilities

• Interpret and apply Ontario FIPPA/PHIPA and DSAs and HINP agreements to the project.
• Assess existing privacy policies and data access models relative to the project.
• Develop integrated project plans and provide weekly status reports on deliverables, risks, and mitigations.
• Coordinate across branches and create briefing notes and presentations for updates to project, program and executives.
• Consult with organization on privacy topics, independently or in teams.
• Provide privacy advice and deliverables for the project.

Skills

Healthcare system knowledge

Ontario privacy regulations (PHIPA/FIP

Job description

Job Description

Yoush Consulting provides project management and information technology expertise to help our clients deliver their projects.

Job Description

Yoush Consulting provides project management and information technology expertise to help our clients deliver their projects.

The Responsibilities Of The Data Privacy Strategist Include

Interpret and apply Ontario Freedom of Information and Protection of Privacy Act (FIPPA) and Personal Health Information Protection Act (PHIPA) and Data Sharing Agreements (DSA) and Health Information Network Provider (HINP) agreements as it relates to the project

• Assess existing policies and regulations to existing privacy frameworks, and data access models as they relate to the project
• Develop an integrated project plan and provide weekly status reports as it relates to progress on project deliverables, risks and mitigation strategies
• Coordinate across branches and develop communication materials such as briefing notes and presentations for project, program and executive level updates
• Consult and gather input from specific individuals within the organization on privacy topics either independently or as part of a team
• Communicate with technical and business teams and non-privacy experts
• Provide privacy advice and supporting deliverables for this project

Requirements

• Strong understanding of the healthcare system, structures, processes, stakeholder groups and affected populations and how healthcare services are delivered in Ontario.
• Strong understanding of the role of the ministry and its delivery partners, and the levers and instruments of change.
• Strong knowledge of provincial health system data (e.g., clinical, administrative, statistical and financial data on population health).
• Strong knowledge of the digital health systems, programs, vendors, assets and solutions in Ontario.
• Strong understanding of Ontario’s privacy regulations/policies/frameworks, and how they are applied to individuals and organizations in the use and protection of personal health information.
• Demonstrated experience with conducting or leading privacy impact assessments in the health context.
• Demonstrated experience with interpreting and applying information management legislation (PHIPA, FIPPA, Public Hospitals Act, Fixing Long-Term Care Act, Primary Care Act etc.) and how it applies to the collection, use and disclosure of health data.
• Demonstrated knowledge and experience of health data and information solutions, information management legislation (e.g., PHIPA, FIPPA, Public Hospitals Act, Fixing Long-Term Care Act, Primary Care Act) and experience with privacy policy, and privacy impact analysis related to collection, storage, use and disclosure of data and information.
• Demonstrated experience in providing privacy risk assessments and analysis and developing mitigation strategies to minimize privacy risk during implementation.
• Demonstrated experience in identifying and mapping business processes and developing data flow diagrams to represent current and future state data collection, management, and disclosure practices.
• Develop options to address privacy issues / business goals and provide recommended solutions
• Demonstrated experience working collaboratively with diverse stakeholders and business partners.
• Strong ability to clearly communicate with technical and business audiences and non-privacy experts.
• Ability to communicate with diverse audiences and synthesize complex ideas into plain language.
• Strong ability to develop internal reporting, demonstrating progress on deliverables and communicating/presenting results of their analysis to various audiences, including to senior and executive management.
• Demonstrated experience of excellent time management and organizational skills; ability to work on long-term strategies as well as day-to-day tasks.
• Demonstrated project management skills to plan and organize work, prioritize and work on multiple project-related activities simultaneously and effectively.
• You have demonstrated planning and organizational skills to manage concurrent projects and coordinate activities with clients, stakeholders and partners