Information & Privacy Officer- Information & Privacy Office, IMG

CAMH; Toronto; On-site; CAD 92,000 - 138,000; Full time

Benefits offered by this job

HOOPP pension plan

Extended health and dental benefits

4 weeks paid vacation

Job summary

CAMH is seeking an Information and Privacy Officer to manage the privacy program, ensure PHIPA/FIPPA compliance, and lead governance across policies, training, and audits. You will oversee incident response, PIAs, and staff education while engaging with stakeholders to maintain data confidentiality and security.

The role requires a Bachelor's degree with privacy experience; CIPP/C is a strong asset, and bilingual French/English is valued.

Qualifications

• Bachelor-level education with strong privacy compliance exposure.
• Solid knowledge of PHIPA and FIPPA/MFIPPA required or asset.
• Experience leading privacy governance, audits and PIAs.
• Ability to train staff and drive compliance culture.
• Bilingual French/English is an asset.

Responsibilities

• Develop privacy policies, procedures and training materials.
• Oversee access requests under FIPPA and PHIPA processes.
• Lead privacy audits and incident investigations.
• Conduct PIAs for new systems and processes.
• Provide guidance to staff on privacy laws and governance.

Skills

PHIPA compliance

FIPPA MFIPPA knowledge

Privacy program management

Policy development

Auditing

PIAs

Staff training

Data governance

Stakeholder relations

Leadership

Microsoft Office

Bilingual FR/EN asset

Education

Bachelor's degree or equivalent related experience

CIPP/C certification asset

Healthcare privacy knowledge

Tools

Microsoft Office

Job description

The Information and Privacy Officer at CAMH is responsible for managing all aspects of the privacy program, including program implementation and monitoring, policy development, stakeholder relations, investigations, auditing, and education initiatives. Reporting to the Director, Clinical Informatics and Health Information Services, the Information and Privacy Officer ensures the confidentiality, integrity, and security of sensitive patient information, oversees compliance with privacy regulations, develops information governance policies, and educates staff on privacy best practices.

Responsibilities & Activities

• Privacy Policy Development (20%):
• Develop and update policies, procedures, and training materials relating to privacy compliance with PHIPA and FIPPA.
• Develop strategies to ensure regulatory compliance.
• Ensure policies reflect the unique considerations of mental health patient information.
• Compliance Oversight (20%):
• Process access requests under FIPPA.
• Process and manage patient correction requests under PHIPA.
• Participate in and implement provincial initiatives.
• Monitor and ensure compliance with privacy laws.
• Create quarterly/annual reports as required.
• Conduct regular audits to assess adherence to privacy policies and regulations.
• Data Management (15%):
• Advise on hospital practices for access to and management of personal health information and personal information to ensure regulatory, policy, and contractual compliance.
• Maintain the hospital Index of Personal Information Banks.
• Incident Response and Reporting (15%):
• Investigate privacy breaches and complaints promptly.
• Report and document incidents in accordance with legal requirements.
• Privacy Impact Assessments (PIAs) (10%):
• Conduct PIAs or privacy reviews for new or changing systems, processes, or initiatives involving personal health information and personal information.
• Consult with program stakeholders on recommendations to mitigate privacy risks and ensure compliance with regulations.
• Training and Education (10%):
• Keep up to date on emerging trends and practices related to information and privacy.
• Represent CAMH with external partners.
• Provide ongoing training to staff on privacy laws, policies, and best practices.
• Foster a culture of privacy awareness within the hospital.
• Support a healthy workplace that embraces diversity, encourages teamwork, and complies with all applicable regulatory and legislative requirements.
• Privacy Audits and Consultations (10%):
• Conduct regular privacy audits to assess data access and handling practices.
• Identify areas for improvement and implement corrective actions.
• Provide guidance and consultation to staff on privacy matters.
• Address inquiries related to personal health information and personal information handling practices.

Education & Specific Training

• Bachelor's degree or equivalent related experience.

Credentials

• Designation as a Certified Information Privacy Professional/Canada (CIPP/C) considered a strong asset.

Experience

• Minimum of three (3) years related work experience (experience may include front office support in a clinical program, privacy consultancy, health records, release of information experience, entry-level work in a privacy and access management office).
• Previous experience in the healthcare industry, management level accountabilities.
• Strong working knowledge of the Personal Health Information Protection Act (PHIPA) and either the Freedom of Information and Protection of Privacy Act (FIPPA) or the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA).
• Strong analytical and problem-solving abilities, organizational and time management skills, as well as sound judgment.
• Leadership experience in driving and executing compliance programs and knowledgeable in process management, analysis, operational improvement, and risk management.
• Enthusiastic, flexible, and capable of working independently and in a team setting, demonstrating excellent interpersonal, organizational, and communication skills (both written and oral).
• Ability to handle matters of a confidential and/or sensitive nature and work well under pressure and timelines.
• Ability to work effectively in a wide range of settings with individuals from diverse backgrounds.
• Proficient in Microsoft Office including Word, Excel, and PowerPoint.
• Bilingualism (French/English) and/or proficiency in a second language is an asset.

Compensation & Benefits

• Salary is competitive and based on experience, with a hiring range of $91,758.17 – $114,697.71 per year.
• Employees in this role may progress within the full pay range of $91,758.17 – $137,637.25 per year
• CAMH’s Total Rewards: Includes participation in HOOPP defined benefit pension plan, extended health and dental benefits, paid vacation starting at 4 weeks, flexible work arrangements, and ongoing professional development support.

This role allows professionals to apply their expertise in a mission-driven environment dedicated to public health outcomes.

CAMH is a fully affiliated teaching hospital and research institute of the University of Toronto. As a CAMH employee, you will contribute to our mission by supporting teaching, research, and clinical care across the hospital.

CAMH is dedicated to equity, diversity, and inclusion. Our commitment is to foster a workplace, teaching, and learning environment that is inclusive, respectful, and free from discrimination or harassment.

CAMH strongly encourages applications from candidates who reflect the diversity of the communities we serve, including First Nations, Métis, and Inuit Peoples; Black and other racialized communities; LGBTQ2S+ communities; women; and people with disabilities, including those with lived experience of mental health and substance use challenges.

We welcome applicants from all backgrounds. Thank you to all who apply; however, only those selected for an interview will be contacted. If you require accommodations during the application or recruitment process, please let us know.

Through its core values of Courage, Respect and Excellence, CAMH is implementing its Strategic Plan: Connected CAMH, to transform lives, ignite innovation and discovery, revolutionize education and drive social change. CAMH is more than a hospital, it is a cause. CAMH is on a mission to change the way society thinks about and responds to mental illness. They aim to eliminate prejudice and discrimination and shape a world where mental illness is central to our healthcare system – a world where Mental Health is Health.

To learn more about CAMH, please visit their website at: www.camh.ca .

To view our Land Acknowledgment, please click here .