Privacy Specialist — OCAD University — Toronto ON

Pacc-Ccap; Toronto; On-site; CAD 70,000 - 95,000; Full time

Job summary

OCAD University is seeking a Privacy Specialist to manage access to information, privacy protections and records management. The role reports to the Vice-President, Finance and Administration and requires applying privacy legislation and guiding the University in governance practices.

Responsibilities include handling information access requests, privacy impact assessments, and promoting a culture of privacy protection across the campus.

Qualifications

• Knowledge of Privacy Law and legislative requirements.
• Experience with records management and information governance.

Responsibilities

• Independently provide authoritative advice on privacy obligations and access to information under applicable privacy laws.
• Prepare regular reports, analyses and strategic advice regarding privacy compliance and information governance.
• Develop institutional privacy frameworks and provide strategic recommendations on privacy and information governance risks.
• Provide guidance to the university community and the public regarding privacy and information access requests.

Skills

Privacy law knowledge

Records management

Regulatory reporting

Job description

OCAD University acknowledges the ancestral territories of the Mississaugas of the Credit, the Haudenosaunee, the Anishinaabeg and the Huron-Wendat, who are the original owners and custodians of the land on which we live, work and create

OCAD University , Canada’s largest and oldest art and design university, is a vibrant community of bold, curious and compassionate artists, designers and scholars who are imagining and creating a joyful, equitable and sustainable world. The University is an internationally renowned hub for art, design, digital media, research, innovation and creativity, and arts administration. It embraces collaborative and interdisciplinary approaches to change-making through art, design-thinking curriculum and research, making OCAD U a local, regional, national and global leader in art and design.

It is an exciting time to join the OCAD U community as the University is at a key stage in its institutional transformation, with the implementation of its Academic and Strategic Plan and guiding principles — driving positive impact; decolonization, indigenization and equity; environmental sustainability; emerging as a vibrant hub; student centered approaches; innovation in learning teaching and research; and financial stewardship.

Reporting to theVice-President, Finance and Administration(VPFA), thePrivacySpecialistacts as OCAD University’ssubject matter experton matters related to access to information, protection of privacy, and records management.Responsibilities include proper application ofaccess andprivacylegislation, processing access to information requests, promoting proper records retention and good record-keeping practices, completing privacy and security impact assessments, investigating privacy breaches and privacy complaints, and promoting a culture of privacy protectionand good information governance at theUniversity.

The Privacy Specialist operates independently and exercises professional judgment while keeping the VPFA informed of significant privacy and records management matters, breaches, investigations, compliance issues and emerging institutional risks, and is responsible for ensuring the University is in compliance with relevant privacy and access legislation.TheSpecialistmusthave knowledge of legislative requirements and mustmaintainan ongoingawareness of developments in the areas of privacy and records management, and the implicationsof those developments for theUniversity.

Summary of Responsibilities:

Privacy (70%)

• Independentlyprovideauthoritative adviceon the University’s obligations underaccessand privacy legislationOntario’sFreedom of Information and Protection of Privacy Act(FIPPA) andPersonal Health InformationProtectionAct(PHIPA)arecollectively referred to as “Privacy Law”.
• Prepare regular reports,analysesandstrategic advicefor the VPFAregardingprivacy compliance, records management, emerging risks, breaches,trendsand information governance matters
• Develop institutional privacy frameworks and provide strategic advice and recommendationsregardingprivacy, informationgovernanceand related institutional risks
• Provide information, guidance and advice to the University community andgeneral publicregardingquestions about privacy and information access requests at the University