Privacy Officer (FT)

Waypoint Centre for Mental Health Care; Penetanguishene; Hybrid; CAD 120,000 - 150,000; Full time

Benefits offered by this job

Dental coverage

HOOPP pension plan

Professional development opportunities

Relocation support

EFAP

Job summary

Waypoint Centre for Mental Health Care in Penetanguishene, ON, is seeking a Manager, Privacy, HIM & Risk to lead our privacy program, oversee PHIPA/FIPPA compliance, and manage breach response and risk assessments.

The role supervises Privacy Services, health information management, and enterprise risk activities, and partners with senior leadership. Hybrid work is offered from the Penetanguishene office at 500 Church St.

Qualifications

• 3+ years of experience providing leadership, advice and direction on complex privacy matters, health information management, compliance, legal, and risk management, preferably within a healthcare environment.
• Knowledge of the laws, regulations and guidelines governing privacy and information management within healthcare, including PHIPA and FIPPA.
• Knowledge of enterprise privacy governance, information governance and security of information for HICs and HINPs, and privacy risk management principles.
• Excellent written and verbal communication skills, ability to communicate complex privacy and legislative requirements.
• Preference for proficiency in French/English language skills."],
• job_responsibilities_description⟶?[]?,

Responsibilities

• Leads the development and oversight of Waypoint’s Privacy Program and privacy governance.
• Advises senior leadership on privacy legislation, information practices, risk and compliance.
• Oversees privacy investigations, breach response, and privacy impact assessments.
• Manages audits, education and awareness, and liaison with external authorities.
• Leads Privacy Services, HIM records management and risk-mitigation planning.
• Supports budgeting, governance reporting, and stakeholder collaboration.

Skills

Leadership

Privacy governance

Regulatory compliance

Risk management

Communication

Education

Bachelor’s Degree in Privacy, Law, health policy, health administration, health information management, public administration or related discipline

Master’s Degree in a related field preferred

Tools

CIPP/C

CIMP/C

CHIMA Certification

Job description

Waypoint Centre for Mental Health Care is a 321-bed academic and teaching hospital that provides specialized mental health, addiction and geriatric care. Located on the shores of Georgian Bay, we serve some of the most complex and disadvantaged individuals in Ontario and are the sole provider of high-secure forensic mental health services in the province.

Waypoint is looking to fill the position of Manager, Privacy, HIM & Risk (Privacy Officer). This position leads the development, implementation, oversight, and continuous improvement of Waypoint's privacy program. As the organization's senior privacy subject matter expert and designated privacy resource, the Manager advises senior leadership on privacy legislation, information practices, risk and compliance, supporting adherence to PHIPA, FIPPA and other applicable requirements. Key responsibilities include overseeing privacy investigations and breach response, privacy impact assessments, access and correction requests, audits, education and awareness, and liaison with the Information and Privacy Commissioner of Ontario and other external partners.

The Manager leads Privacy Services, including the Privacy and Legislation Lead and Claims Coordinator, and establishes effective governance, controls, reporting and service standards to ensure privacy risks are identified, escalated and addressed. The role also oversees health information management and corporate risk activities, including health records and registration functions, records management strategy, claims administration and the development of effective risk-mitigation strategies in collaboration with the Director.

Please Note: This position offers a hybrid work environment consisting of in-office and remote work. Office location is 500 Church St. Penetanguishene, ON.

KEY ACCOUNTABILITIES

• Leads and oversees Waypoint’s Privacy Program, ensuring compliance with applicable privacy legislation, regulatory requirements, agreements with partners, and organizational policies.
• Serves as Waypoint’s Privacy Officer and primary privacy subject matter expert, providing advice to senior leaders, managers and staff on complex privacy matters
• Develops, maintains and recommends privacy policies, standards, procedures and practices to support effective privacy governance.
• Monitors legislative, regulatory and industry developments and assesses their impact on Waypoint’s privacy obligations and practices.
• Provides privacy reporting, recommendations and updates to senior leadership and relevant governance committees.

Privacy Compliance, Advisory and Risk

• Provides expert advice on PHIPA, FIPPA and other privacy requirements, including consent, information handling, access, correction and disclosure.
• Advises on privacy implications and safeguards for organizational initiatives, technology, contracts, research and information-sharing arrangements; leads privacy impact and risk assessments.
• Identifies privacy risks and recommends controls, mitigation and corrective actions; oversees privacy terms in vendor and partner agreements and conducts user audits.
• Leads privacy breach, incident, complaint and regulatory matters, including investigation, notification, remediation, documentation and coordination with the Information and Privacy Commissioner of Ontario.

Privacy Education and Program Improvement

• Leads the development and delivery of privacy education, training and awareness initiatives for staff, physicians, contractors, volunteers, students and other applicable stakeholders.
• Develops privacy communications, resources and tools to support consistent understanding and application of privacy requirements.
• Oversees privacy monitoring, audits, incident trends and other assurance activities to assess compliance and identify opportunities for improvement.

Leadership of Privacy Services

• Leads and oversees Privacy Services, setting priorities, allocating resources and coordinating activities and deliverables.
• Supervises and develops direct reports through coaching, direction and performance management.
• Maintains effective Privacy Services processes, systems, records and reporting, including annual program reviews, Board reports and privacy statistics.
• Represents Privacy Services in organizational and external committees and initiatives, collaborating with partner privacy officers and supporting shared compliance obligations.

Claims Services and Operational Management

• Provides management oversight for the administration and coordination of Waypoint’s actual and potential claims, including tracking claims, documentation, insurer and legal coordination, reporting and follow-up.
• Ensures claims matters requiring legal advice, professional judgment or senior leadership involvement are appropriately escalated.
• Supports annual budgeting, operational planning and resource management for Privacy Services.
• Maintains effective working relationships with internal stakeholders, external privacy professionals, regulators, insurers, legal counsel, partner organizations and other relevant stakeholders.
• Oversees actual and potential claims, ensuring they are tracked, documented, reported, and followed up appropriately.
• Coordinates with insurers, legal counsel and internal stakeholders, escalating complex or high-risk matters as needed.
• Supports Privacy Services budgeting, operational planning and resource management.
• Builds and maintains effective relationships with key internal and external stakeholders.
• Supports the Enterprise Risk Management program

REQUIREMENTS/QUALIFICATIONS

• Bachelor’s Degree ideally in Privacy, Law, health policy, health administration, health information management, public administration or related discipline.
• Master’s Degree in a related field preferred
• Canadian privacy certification: e.g. Certified Information Privacy Professional (CIPP/C), Certified Information Privacy Manager (CIMP/C), or equivalent experience.
• Canadian Health Information Management Association Certification preferred
• Minimum of 3 years of experience providing leadership, advice and direction on complex privacy matters, health information management, compliance, legal, and risk management, preferably within a healthcare environment.
• Knowledge of the laws, regulations and guidelines governing privacy and information management within healthcare, including PHIPA and FIPPA, Canadian privacy and data protection standards and laws.
• Knowledge of enterprise privacy governance, information governance and security of information for HICs and HINPs, and privacy risk management principles.
• Knowledge of privacy requirements applicable to healthcare information systems, electronic health records, information-sharing arrangements and technology-enabled services.
• Excellent research skills and ability to evaluate emerging legislative, regulatory and industry developments and assess their impact on the organization.
• Excellent written and verbal communication skills, ability to communicate complex privacy and legislative requirements.
• Demonstrated leadership, coaching and team-management skills.
• Strong project management, planning and organizational skills.
• Models and promotes core ethical practice, Waypoint Values (Caring, Respect, Accountability, Innovation)
• Preference for proficiency in French/English language skills.

WHAT WE OFFER

• A comprehensive and generous benefit plan including dental coverage, paid holidays, paid vacation days, sick days and extended health benefits
• Participation in the Health Care of Ontario Pension Plan (HOOPP)
• Professional development and mentorship opportunities
• Relocation support program for eligible staff
• Access to Waypoint’s Employee & Family Assistance Program (EFAP)