Data Privacy Strategist

Yoush Consulting; Toronto; On-site; CAD 110,000 - 140,000; Full time

Job summary

Yoush Consulting in Toronto is seeking a Data Privacy Strategist to interpret and apply FIPPA/PHIPA and related agreements to privacy projects, ensuring compliant data handling across the program.

You will assess policies, develop integrated project plans, provide weekly status updates, coordinate across branches, and deliver privacy guidance and materials to technical and business teams.

Qualifications

• Knowledge of Ontario privacy laws (PHIPA/FIPPA) and health data governance.
• Experience with privacy impact assessments in health care.
• Ability to map data flows and business processes.
• Strong communication with technical and non-technical audiences.
• Ability to work with diverse stakeholders.

Responsibilities

• Interpret and apply Ontario FIPPA/PHIPA and related agreements to the project.
• Assess policies and regulations to privacy frameworks and data access models.
• Develop an integrated project plan and provide weekly status reports on deliverables, risks and mitigations.
• Coordinate across branches and develop briefing notes and presentations for updates at project, program and executive level.
• Consult and gather input on privacy topics independently or as part of a team.
• Communicate with technical and business teams and non-privacy experts.
• Provide privacy advice and supporting deliverables for this project.

Skills

Privacy regulations

Stakeholder comms

Project management

Healthcare privacy

Plain language

Job description

Yoush Consulting provides project management and information technology expertise to help our clients deliver their projects.

The responsibilities of the Data Privacy Strategist include:

Interpret and apply Ontario Freedom of Information and Protection of Privacy Act (FIPPA) and Personal Health Information Protection Act (PHIPA) and Data Sharing Agreements (DSA) and Health Information Network Provider (HINP) agreements as it relates to the project

• Assess existing policies and regulations to existing privacy frameworks, and data access models as they relate to the project
• Develop an integrated project plan and provide weekly status reports as it relates to progress on project deliverables, risks and mitigation strategies
• Coordinate across branches and develop communication materials such as briefing notes and presentations for project, program and executive level updates
• Consult and gather input from specific individuals within the organization on privacy topics either independently or as part of a team
• Communicate with technical and business teams and non-privacy experts
• Provide privacy advice and supporting deliverables for this project

Requirements

• Strong understanding of the healthcare system, structures, processes, stakeholder groups and affected populations and how healthcare services are delivered in Ontario.
• Strong understanding of the role of the ministry and its delivery partners, and the levers and instruments of change.
• Strong knowledge of provincial health system data (e.g., clinical, administrative, statistical and financial data on population health).
• Strong knowledge of the digital health systems, programs, vendors, assets and solutions in Ontario.
• Strong understanding of Ontario’s privacy regulations/policies/frameworks, and how they are applied to individuals and organizations in the use and protection of personal health information.
• Demonstrated experience with conducting or leading privacy impact assessments in the health context.
• Demonstrated experience with interpreting and applying information management legislation (PHIPA, FIPPA, Public Hospitals Act, Fixing Long-Term Care Act, Primary Care Act etc.) and how it applies to the collection, use and disclosure of health data.
• Demonstrated knowledge and experience of health data and information solutions, information management legislation (e.g., PHIPA, FIPPA, Public Hospitals Act, Fixing Long-Term Care Act, Primary Care Act) and experience with privacy policy, and privacy impact analysis related to collection, storage, use and disclosure of data and information.
• Demonstrated experience in providing privacy risk assessments and analysis and developing mitigation strategies to minimize privacy risk during implementation.
• Demonstrated experience in identifying and mapping business processes and developing data flow diagrams to represent current and future state data collection, management, and disclosure practices.
• Develop options to address privacy issues / business goals and provide recommended solutions
• Demonstrated experience working collaboratively with diverse stakeholders and business partners.
• Strong ability to clearly communicate with technical and business audiences and non-privacy experts.
• Ability to communicate with diverse audiences and synthesize complex ideas into plain language.
• Strong ability to develop internal reporting, demonstrating progress on deliverables and communicating/presenting results of their analysis to various audiences, including to senior and executive management.
• Demonstrated experience of excellent time management and organizational skills; ability to work on long-term strategies as well as day-to-day tasks.
• Demonstrated project management skills to plan and organize work, prioritize and work on multiple project-related activities simultaneously and effectively.
• You have demonstrated planning and organizational skills to manage concurrent projects and coordinate activities with clients, stakeholders and partners